CVE-2005-2292

Currently unrated

Key Information:

Vendor
Oracle
Status
Jdeveloper
Vendor
CVE Published:
18 July 2005

Summary

Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 stores cleartext passwords in (1) IDEConnections.xml, (2) XSQLConfig.xml and (3) settings.xml, which allows local users to obtain sensitive information.

References

http://www.red-database-security.com/advisory/oracle_jdev...
x_refsource_MISC
http://secunia.com/advisories/15991/
third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/21342
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.