Description
The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSION_USER to the SYS user.
Remediation
References
Related Vulnerabilities
WordPress Plugin Popup Maker-Popup for opt-ins, lead gen, & more Multiple Vulnerabilities (1.17.1)
WordPress Plugin EME Sync Facebook Events Unspecified Vulnerability (1.0.38)
WebLogic CVE-2020-14637 Vulnerability (CVE-2020-14637)
Drupal Core 6.x Session Hijacking (6.0 - 6.33)
WordPress Plugin Protected Posts Logout Button Cross-Site Request Forgery (1.4.4)