CVE-2002-1252 | BDVDB-2026-6922 Detail

Description#

The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various PeopleSoft products, allows remote attackers to read arbitrary files via certain XML External Entities (XXE) fields in an HTTP POST request that is processed by the SimpleFileHandler handler.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.iss.net/security_center/static/10520.php
http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21811
http://www.securityfocus.com/bid/6647

Exploit#

No public exploit known

History#

Version 12004-09-01Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.