Description

Multiple components in Oracle 9i Application Server (9iAS) are installed with over 160 default usernames and passwords, including (1) SYS, (2) SYSTEM, (3) AQJAVA, (4) OWA, (5) IMAGEUSER, (6) USER1, (7) USER2, (8) PLSQL, (9) DEMO, (10) FINANCE, and many others, which allows attackers to gain privileges.

Remediation

References

CVE-2002-1637

Related Vulnerabilities

WordPress Plugin WPS Cleaner Multiple Cross-Site Request Forgery Vulnerabilities (1.4.4)

Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-1154)

WordPress 5.5.x Multiple Vulnerabilities (5.5 - 5.5.1)

Apache 2.x version older than 2.0.46

Oracle JRE CVE-2013-2437 Vulnerability (CVE-2013-2437)

Severity

Medium

Classification

CVE-2002-1637

Tags

Missing Update Known Vulnerabilities