Description

Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sensitive information including usernames and passwords by requesting (1) XSQLConfig.xml or (2) soapConfig.xml through a virtual directory.

Remediation

References

CVE-2002-0568

Related Vulnerabilities

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-5341)

WordPress Plugin WP-T-Wap Cross-Site Scripting (1.13.2)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1629)

Artifactory Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-45721)

Citrix NetScaler Information Disclosure 'Citrix Bleed' (CVE-2023-4966)

Severity

Low

Classification

CVE-2002-0568

Tags

Missing Update Known Vulnerabilities