CVE-2002-0562 | BDVDB-2026-4192 Detail

Description#

The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under the web root, which allows remote attackers to gain sensitive information including usernames and passwords via a direct HTTP request to globals.jsa.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.cert.org/advisories/CA-2002-08.html
http://www.kb.cert.org/vuls/id/698467
http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf
http://www.securityfocus.com/bid/4034
http://marc.info/?l=bugtraq&m=101301440005580&w=2

Exploit#

No public exploit known

History#

Version 12002-06-11Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.