Description

PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to bypass authentication for a Database Access Descriptor (DAD) by modifying the URL to reference an alternate DAD that already has valid credentials.

Remediation

References

CVE-2002-0564

Related Vulnerabilities

Drupal Other Vulnerability (CVE-2008-3661)

WordPress Plugin Alpine PhotoTile for Instagram Cross-Site Scripting (1.2.7.7)

Drupal Numeric Errors Vulnerability (CVE-2007-5416)

WordPress Plugin Elementor Website Builder Cross-Site Scripting (2.9.9)

Drupal CVE-2020-13665 Vulnerability (CVE-2020-13665)

Severity

High

Classification

CVE-2002-0564

Tags

Missing Update Known Vulnerabilities