Description

rwcgi60 CGI program in Oracle Reports Server, by design, provides sensitive information such as the full pathname, which could enable remote attackers to use the information in additional attacks.

Remediation

References

CVE-2002-1089

Related Vulnerabilities

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-42047)

PHP Other Vulnerability (CVE-2007-1886)

Oracle Database Server CVE-2015-4796 Vulnerability (CVE-2015-4796)

WordPress Plugin Essential Blocks-Page Builder Gutenberg Blocks, Patterns & Templates Multiple Security Bypass Vulnerabilities (4.0.6)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-8386)

Severity

Medium

Classification

CVE-2002-1089

Tags

Missing Update Known Vulnerabilities