| Package | Affected versions | Patched versions |
|---|---|---|
| application server | = 1.0.2 | |
| application server web cache | = 2.0.0.0= 2.0.0.1= 2.0.0.2= 2.0.0.3 | |
| oracle8i | = 8.1.7= 8.1.7.1 | |
| oracle9i | = 9.0= 9.0.1 |
PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to bypass authentication for a Database Access Descriptor (DAD) by modifying the URL to reference an alternate DAD that already has valid credentials.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free