CVE-2023-22047

HIGHNuclei

Oracle Peoplesoft - Unauthenticated File Read

Title source: github.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2023-22047 has a selected CVSS score of 7.5 (high); EIP currently links 1 repository PoC and 1 Nuclei template.

Description

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.59 and 8.60. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Description source: GitHub Advisory

Exploitation context

Available material

Repository PoCs
1
Nuclei templates
1

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 13, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

PeopleSoft Enterprise PT PeopleTools

Browse Oracle Corporation / PeopleSoft Enterprise PT PeopleTools
CVE List8.59affected
8.60affected

Proofs of concept

1

Repository PoCs

GitHubtuo4n8/CVE-2023-22047Repository PoCby tuo4n812Not analyzed4 files

185.3 KiB

GitHub
PoC details

Nuclei templates

1
ProjectDiscoveryHIGHOracle Peoplesoft - Unauthenticated File ReadCVSS 7.5

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component- Portal). Supported versions that are affected are 8.59 and 8.60. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data.

Impact

Unauthenticated attackers can read arbitrary files from the PeopleSoft server through the wsrp-url parameter in the Portal component, potentially accessing critical data including configuration files and sensitive employee information.

Remediation

Update Oracle PeopleSoft Enterprise PeopleTools to a version newer than 8.60 that validates and restricts file:// URLs in the wsrp-url parameter.

Authorstuo4n8
Template tagscvecve2023oraclepeoplesoftlfivuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CPE: cpe:2.3:a:oracle:peoplesoft_enterprise:8.59:*:*:*:*:*:*:*
Shodan: http.title:"oracle peoplesoft enterprise"
FOFA: title="oracle peoplesoft enterprise"
Google: intitle:"oracle peoplesoft enterprise"
https://nvd.nist.gov/vuln/detail/CVE-2023-22047 https://x.com/tuo4n8/status/1907279143517266286

Source: ProjectDiscovery

References

2