CVE-2002-0564

published 2002-07-03

CVE-2002-0564: PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to bypass authentication for a Database Access Descriptor (DAD) by…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to bypass authentication for a Database Access Descriptor (DAD) by modifying the URL to reference an alternate DAD that already has valid credentials.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
oracle	application_server	—	—
oracle	application_server_web_cache	—	—
oracle	application_server_web_cache	—	—
oracle	application_server_web_cache	—	—
oracle	application_server_web_cache	—	—
oracle	oracle8i	—	—
oracle	oracle8i	—	—
oracle	oracle9i	—	—
oracle	oracle9i	—	—