low2.1
CVE-2005-2292
Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 stores cleartext passwords in (1) IDEConnections.xml, (2) XSQLConfig.xml and (3) settings.xml, which allows local us…
Impact
Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 stores cleartext passwords in (1) IDEConnections.xml, (2) XSQLConfig.xml and (3) settings.xml, which allows local users to obtain sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Jdeveloper | Versions 9.0.4, 9.0.5, 10.1.2 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=112129177927502&w=2
- http://secunia.com/advisories/15991/
- http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html
- http://www.red-database-security.com/advisory/oracle_jdeveloper_plaintext_password.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21342
- http://marc.info/?l=bugtraq&m=112129177927502&w=2
- http://secunia.com/advisories/15991/
- http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html
- http://www.red-database-security.com/advisory/oracle_jdeveloper_plaintext_password.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21342