Oracle Application Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2001-1371)

Description

The default configuration of Oracle Application Server 9iAS 1.0.2.2 enables SOAP and allows anonymous users to deploy applications by default via urn:soap-service-manager and urn:soap-provider-manager.

Remediation

References

CVE-2001-1371

Related Vulnerabilities

Ruby on Rails Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3514)

Prototype CVE-2020-27511 Vulnerability (CVE-2020-27511)

Envoy Proxy Insufficient Verification of Data Authenticity Vulnerability (CVE-2020-8660)

WordPress 5.2.x Multiple Vulnerabilities (5.2 - 5.2.3)

WordPress Plugin bib2html Cross-Site Scripting (0.9.3)

Severity

High

Classification

CVE-2001-1371 CWE-264