CVE-2005-2293

5.5MEDIUM

Key Information:

Vendor
Oracle
Status
Forms Builder
Vendor
CVE Published:
18 July 2005

Summary

Oracle Formsbuilder 9.0.4 stores database usernames and passwords in a temporary file, which is not deleted after it is used, which allows local users to obtain sensitive information.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/21343
vdb-entryx_refsource_XF
http://secunia.com/advisories/15991/
third-party-advisoryx_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=112129452232307&w=2
mailing-listx_refsource_BUGTRAQ

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.