Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to obtain sensitive information via a request to the oracle.apps.cz.servlet.UiServlet servlet with the test parameter set to "version" or "host".
References
| Link | Resource |
|---|---|
| http://securitytracker.com/id?1003967 | Patch Third Party Advisory VDB Entry |
| http://www.kb.cert.org/vuls/id/158323 | Patch Third Party Advisory US Government Resource |
| http://www.oracle.com/technology//deploy/security/htdocs/oconfigvul.html | Patch |
| http://www.securityfocus.com/bid/4433 | Third Party Advisory VDB Entry Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/8782 | VDB Entry |
| http://securitytracker.com/id?1003967 | Patch Third Party Advisory VDB Entry |
| http://www.kb.cert.org/vuls/id/158323 | Patch Third Party Advisory US Government Resource |
| http://www.oracle.com/technology//deploy/security/htdocs/oconfigvul.html | Patch |
| http://www.securityfocus.com/bid/4433 | Third Party Advisory VDB Entry Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/8782 | VDB Entry |
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:41
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://securitytracker.com/id?1003967 - Patch, Third Party Advisory, VDB Entry | |
| References | () http://www.kb.cert.org/vuls/id/158323 - Patch, Third Party Advisory, US Government Resource | |
| References | () http://www.oracle.com/technology//deploy/security/htdocs/oconfigvul.html - Patch | |
| References | () http://www.securityfocus.com/bid/4433 - Third Party Advisory, VDB Entry, Vendor Advisory | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/8782 - VDB Entry |
Information
Published : 2002-04-01 05:00
Updated : 2024-11-20 23:41
NVD link : CVE-2002-1639
Mitre link : CVE-2002-1639
CVE.ORG link : CVE-2002-1639
JSON object : View
Products Affected
oracle
- configurator
CWE