Secunia

Two vulnerabilities have been reported in PeopleTools, which can be exploited by malicious, authenticated users to cause a DoS (Denial of Service) or disclose various system information.

1) Using the <Control><J> hot key discloses various sensitive system information, which shouldn't be available to all users.

2) The "LONGCHAR" and "VARCHAR" fields reportedly allow large amounts of data to be uploaded, which may cause a DoS.

The vulnerabilities have both been reported in version 8.42. However, other versions may also be affected.

Solution
Limit the size of the "LONGCHAR" and "VARCHAR" fields.
Further details available in Customer Area

Provided and/or discovered by
Barrett McGuire, Larry Wargo, and Matt Fotter.

Deep Links
Links available in Customer Area