Peoplesoft Enterprise Fin Pay Bill Management
Monthly
Local information disclosure in Oracle PeopleSoft Enterprise FIN Pay/Bill Management 9.2 allows a low-privileged user with logon access to the hosting infrastructure to access all financial data within the Pay/Bill Management component. The vulnerability is tagged as an Authentication Bypass, suggesting a low-privileged account holder can circumvent internal access controls to read data beyond their authorization level. No public exploit code exists and it is not listed in the CISA KEV catalog, but the CVSS vector rates it as easily exploitable once local access is obtained.
Local information disclosure in Oracle PeopleSoft Enterprise FIN Pay/Bill Management 9.2 allows a low-privileged user with logon access to the hosting infrastructure to access all financial data within the Pay/Bill Management component. The vulnerability is tagged as an Authentication Bypass, suggesting a low-privileged account holder can circumvent internal access controls to read data beyond their authorization level. No public exploit code exists and it is not listed in the CISA KEV catalog, but the CVSS vector rates it as easily exploitable once local access is obtained.