Description

Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sensitive information including usernames and passwords by requesting (1) XSQLConfig.xml or (2) soapConfig.xml through a virtual directory.

Remediation

References

CVE-2002-0568

Related Vulnerabilities

Ampache Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2008-3929)

MySQL CVE-2022-21254 Vulnerability (CVE-2022-21254)

Undertow CVE-2022-1259 Vulnerability (CVE-2022-1259)

PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23184)

WordPress Plugin Jetpack-WP Security, Backup, Speed, & Growth Multiple Vulnerabilities (4.0.3)

Severity

Low

Classification

CVE-2002-0568

Tags

Missing Update Known Vulnerabilities