24 matches found
CVE-2020-2312
Jenkins SQLPlus Script Runner Plugin 2.0.12 and earlier does not mask a password provided as command line argument in build logs...
By Orabrute to brute force oracle passwords-vulnerability warning-the black bar safety net
1 Standard Oracle password may consist of letters, numbers,, and underscores , the dollar character$Configuration, The maximum password length is 3 0 character; the Oracle password is not to"$","",""or any number at the beginning; the password cannot contain"SELECT"AND"DELETE","CREATE"such...
CVE-2005-2291
Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 passes the cleartext password as a parameter when starting sqlplus, which allows local users to gain sensitive information...
CVE-2005-2291
CVE-2005-2291 : Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 pass the cleartext password as a parameter when starting sqlplus, enabling local users to gain sensitive information. The connected documents confirm the affected products and the root cause (password passed in cleartext as a startup para...