CVE-2002-0562

published 2002-07-03

CVE-2002-0562: The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under the web root, which allows remote…

medium 5 CVSS 3.1

AV N AC L Au N C P I N A N

The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under the web root, which allows remote attackers to gain sensitive information including usernames and passwords via a direct HTTP request to globals.jsa.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
oracle	application_server	—	—
oracle	application_server_web_cache	—	—
oracle	application_server_web_cache	—	—
oracle	application_server_web_cache	—	—
oracle	application_server_web_cache	—	—
oracle	oracle9i	—	—
oracle	oracle9i	—	—