Lucene search
HistoryMar 09, 2002 - 5:00 a.m.
CVE-2001-0528
oracle
e-business suite
applications desktop integrator
password security
privilege vulnerability
cve-2001-0528
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.7 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
26.7%
Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x includes a debug version of FNDPUB11I.DLL, which logs the APPS schema password in cleartext in a debug file, which allows local users to obtain the password and gain privileges.
Affected configurations
Node
oraclee-business_suiteMatch11i
| CPE | Name | Operator | Version |
|---|---|---|---|
| oracle:e-business_suite | oracle e-business suite | eq | 11i |
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.7 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
26.7%
Related for CVE-2001-0528