CVE-2020-2312

CVE-2020-2312 concerns Jenkins SQLPlus Script Runner Plugin (versions 2.0.12 and earlier). The issue arises because the plugin prints the sqlplus command invocation to build logs without masking the password provided as a command line argument, enabling users with Item/Read permission to view the...

CVE-2020-2312

Jenkins SQLPlus Script Runner Plugin 2.0.12 and earlier does not mask a password provided as command line argument in build logs...

CVE-2020-2312: Undefined Security Weakness

Jenkins SQLPlus Script Runner Plugin 2.0.12 and earlier does not mask a password provided as command line argument in build logs...

By Orabrute to brute force oracle passwords-vulnerability warning-the black bar safety net

1 Standard Oracle password may consist of letters, numbers,, and underscores , the dollar character$Configuration, The maximum password length is 3 0 character; the Oracle password is not to"$"，""，""or any number at the beginning; the password cannot contain"SELECT"AND"DELETE","CREATE"such...

CVE-2005-2291

Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 passes the cleartext password as a parameter when starting sqlplus, which allows local users to gain sensitive information...

CVE-2005-2291

CVE-2005-2291 : Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 pass the cleartext password as a parameter when starting sqlplus, enabling local users to gain sensitive information. The connected documents confirm the affected products and the root cause (password passed in cleartext as a startup para...

CVE-2005-2291: Undefined Security Weakness

Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 passes the cleartext password as a parameter when starting sqlplus, which allows local users to gain sensitive information...