Lucene search
HistoryJul 03, 2002 - 4:00 a.m.
CVE-2002-0568
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
5.5 Medium
AI Score
Confidence
Low
0.938 High
EPSS
Percentile
99.1%
Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sensitive information including usernames and passwords by requesting (1) XSQLConfig.xml or (2) soapConfig.xml through a virtual directory.
Affected configurations
Node
oracleapplication_serverMatch1.0.2
ORoracleoracle8iMatch8.1.7
ORoracleoracle8iMatch8.1.7.1
ORoracleoracle9iMatch9.0
ORoracleoracle9iMatch9.0.1
Related
cert
cert
openvas
openvas
Oracle 9iAS SOAP configuration file retrieval
2005-11-03 00:00:00
Oracle XSQLServlet XSQLConfig.xml File
2005-11-03 00:00:00
Oracle 9iAS SOAP configuration file retrieval
2005-11-03 00:00:00
checkpoint_advisories
checkpoint_advisories
nessus
nessus
Oracle Application Server XSQLServlet XSQLConfig.xml Information Disclosure
2002-02-07 00:00:00
Oracle 9iAS XSQLServlet soapConfig.xml Authentication Credentials Disclosure
2003-02-11 00:00:00
Oracle Application Server Multiple Vulnerabilities
2012-01-24 00:00:00
cvelist
cvelist
CVE-2002-0568
2002-06-11 04:00:00
cve
cve
CVE-2002-0568
2002-07-03 04:00:00
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
5.5 Medium
AI Score
Confidence
Low
0.938 High
EPSS
Percentile
99.1%
Related for NVD:CVE-2002-0568