Oracle iPlanet Web Server 7.0.x - Authentication Bypass Detection

Oracle iPlanet Web Server 7.0.x has incorrect access control for admingui/version URIs in the Administration console, as demonstrated by unauthenticated read access to encryption keys. NOTE a related support policy can be found in the www.oracle.com references attached to this CVE. !/usr/bin/env...

CVE-2020-9315

PRODUCT NOT SUPPORTED WHEN ASSIGNED Oracle iPlanet Web Server 7.0.x has Incorrect Access Control for admingui/version URIs in the Administration console, as demonstrated by unauthenticated read access to encryption keys. NOTE: a related support policy can be found in the www.oracle.com references...

PT-2020-5388

Name of the Vulnerable Software and Affected Versions Oracle iPlanet Web Server version 7.0.x Description The issue is related to incorrect access control in the Oracle iPlanet Web Server, allowing unauthenticated read access to encryption keys. This can enable a remote attacker to disclose...

CVE-2020-9315: Missing Authentication for Critical Function

PRODUCT NOT SUPPORTED WHEN ASSIGNED Oracle iPlanet Web Server 7.0.x has Incorrect Access Control for admingui/version URIs in the Administration console, as demonstrated by unauthenticated read access to encryption keys. NOTE: a related support policy can be found in the www.oracle.com references...