Description

Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sensitive information including usernames and passwords by requesting (1) XSQLConfig.xml or (2) soapConfig.xml through a virtual directory.

Remediation

References

CVE-2002-0568

Related Vulnerabilities

WordPress Plugin Video Gallery /w YouTube, Vimeo Multiple Vulnerabilities (8.80)

Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-2922)

WordPress Plugin Easy Contact Form Pro Cross-Site Scripting (1.1.1.8)

WordPress Plugin WordPress Comment Rating Cross-Site Scripting (1.5.3)

MySQL CVE-2013-3811 Vulnerability (CVE-2013-3811)

Severity

Low

Tags

Missing Update Known Vulnerabilities CVE-2002-0568