CVE-2002-0568

None

CVSS

—

EPSS

75.2%

Published

Jul 3, 2002

CISA due date

—

The record

Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sensitive information including usernames and passwords by requesting (1) XSQLConfig.xml or (2) soapConfig.xml through a virtual directory.

Affected packages

Ecosystem	Package	Introduced	Fixed