PeopleSoft PeopleTools Search Information Disclosure Vulnerability

Bugtraq ID:	8788
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 07 2003 12:00AM
Updated:	Oct 07 2003 12:00AM
Credit:	Discovery of this vulnerability has been credited to Barrett McGuire, Larry Wargo and Matt Fotter.
Vulnerable:	PeopleSoft PeopleTools 8.42 PeopleSoft PeopleTools 8.41 PeopleSoft PeopleTools 8.40 PeopleSoft PeopleTools 8.19 PeopleSoft PeopleTools 8.19 PeopleSoft PeopleTools 8.18 PeopleSoft PeopleTools 8.17 PeopleSoft PeopleTools 8.16 PeopleSoft PeopleTools 8.15 PeopleSoft PeopleTools 8.14 PeopleSoft PeopleTools 8.13 PeopleSoft PeopleTools 8.12 PeopleSoft PeopleTools 8.11 PeopleSoft PeopleTools 8.10 PeopleSoft PeopleTools 8.4
Not Vulnerable:

PeopleSoft PeopleTools Search Information Disclosure Vulnerability

If the target folder name is known, this issue may be exploited using a standard Internet browser.

PeopleSoft PeopleTools Search Information Disclosure Vulnerability

Solution:
It has been reported that the vendor has released a solution ID 200749183 to address this issue. Customers are advised to contact the vendor in relation to this solution.

PeopleSoft PeopleTools Search Information Disclosure Vulnerability

References:

• PeopleSoft Homepage (PeopleSoft)
  
• PeopleSoft Grid Option Vulnerability ()