CVE-2002-1252

Опубликовано: 07 фев. 2003

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various PeopleSoft products, allows remote attackers to read arbitrary files via certain XML External Entities (XXE) fields in an HTTP POST request that is processed by the SimpleFileHandler handler.

Ссылки

http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21811
Vendor Advisory
http://www.iss.net/security_center/static/10520.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/6647
http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21811
Vendor Advisory
http://www.iss.net/security_center/static/10520.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/6647

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:peoplesoft:peopletools:8.14:*:*:*:*:*:*:*

cpe:2.3:a:peoplesoft:peopletools:8.15:*:*:*:*:*:*:*

cpe:2.3:a:peoplesoft:peopletools:8.16:*:*:*:*:*:*:*

cpe:2.3:a:peoplesoft:peopletools:8.17:*:*:*:*:*:*:*

cpe:2.3:a:peoplesoft:peopletools:8.18:*:*:*:*:*:*:*

EPSS

Процентиль: 62%

0.00424

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-g8hf-fqm5-7rhh

github

почти 4 года назад