Description
The installation process for Oracle 10g and llg uses accounts with default passwords, which allows remote attackers to obtain login access by connecting to the Listener. NOTE: at the end of the installation, if performed using the Database Configuration Assistant (DBCA), most accounts are disabled or their passwords are changed.
Remediation
References
Related Vulnerabilities
Liferay DXP CVE-2020-15840 Vulnerability (CVE-2020-15840)
Jboss EAP Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-3859)
MySQL CVE-2020-14643 Vulnerability (CVE-2020-14643)
Oracle JRE CVE-2018-2797 Vulnerability (CVE-2018-2797)
WordPress Plugin LBstopattack Cross-Site Request Forgery (1.1.2)