Description
Unspecified vulnerability in the Authentication component for Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and attack vectors, aka DB05. NOTE: as of 20070424, Oracle has not disputed reliable claims that this issue allows remote authenticated users to bypass the AUTH_ALTER_SESSION security policies via a logon trigger ("AFTER LOGON ON DATABASE" trigger directive), a related issue to CVE-2006-0547.
Remediation
References
Related Vulnerabilities
Dolibarr Improper Input Validation Vulnerability (CVE-2013-2093)
WordPress Plugin Jekyll Exporter Remote Code Execution (2.2.0)
WordPress Plugin WPS Hide Login Cross-Site Request Forgery (1.0)
WordPress Plugin DiveBook Multiple Vulnerabilities (1.1.4)
WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-40690)