CVE-2005-2292

3 documents3 sources
Severity
2.1LOW
EPSS
0.3%
top 43.92%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Oracle Jdeveloper
Timeline
PublishedJul 18
Latest updateMay 1

Description

Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 stores cleartext passwords in (1) IDEConnections.xml, (2) XSQLConfig.xml and (3) settings.xml, which allows local users to obtain sensitive information.

CVSS vector

AV:L/AC:L/C:P/I:N/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages1 packages

▶NVDoracle/jdeveloper10.1.2, 9.0.4, 9.0.5+2

Patches

Patch: secunia.com ↗Patch: www.oracle.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-vhm2-37q8-p9f4: Oracle JDeveloper 9↗2022-05-01
▶
CVEList
CVE-2005-2292: Oracle JDeveloper 9↗2005-07-17
▶