2.1
CVE-2005-2292
- EPSS 0.87%
- Veröffentlicht 18.07.2005 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:14:37
- Erkennungen
LoginOracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 stores cleartext passwords in (1) IDEConnections.xml, (2) XSQLConfig.xml and (3) settings.xml, which allows local users to obtain sensitive information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Jdeveloper Version 9.0.4
Oracle ≫ Jdeveloper Version 9.0.5
Oracle ≫ Jdeveloper Version 10.1.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.87% | 0.542 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:P/I:N/A:N
|
http://marc.info/?l=bugtraq&m=112129177927502&w=2
http://secunia.com/advisories/15991/
http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html
http://www.red-database-security.com/advisory/oracle_jdeveloper_plaintext_password.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/21342