CVE-2002-0565

published 2002-07-03

CVE-2002-0565: Oracle 9iAS 1.0.2.x compiles JSP files in the _pages directory with world-readable permissions under the web root, which allows remote attackers to obtain…

medium 5 CVSS 3.1

AV N AC L Au N C P I N A N

Oracle 9iAS 1.0.2.x compiles JSP files in the _pages directory with world-readable permissions under the web root, which allows remote attackers to obtain sensitive information derived from the JSP code, including usernames and passwords, via a direct HTTP request to _pages.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
oracle	application_server	—	—
oracle	application_server_web_cache	—	—
oracle	application_server_web_cache	—	—
oracle	application_server_web_cache	—	—
oracle	application_server_web_cache	—	—
oracle	oracle9i	—	—
oracle	oracle9i	—	—