CVE-2002-0562: Medium severity Oracle Oracle9i vulnerability
The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under the web root, which allows remote attackers to gain sensitive information including usernames and passwords via a direct HTTP request to globals.jsa.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0562?
CVE-2002-0562 has a medium severity rating due to the potential exposure of sensitive information.
How do I fix CVE-2002-0562?
To fix CVE-2002-0562, you should apply the latest security patches for Oracle 9i Application Server and ensure proper configuration to restrict access to globals.jsa.
What systems are affected by CVE-2002-0562?
CVE-2002-0562 affects Oracle 9i Application Server 1.0.2.x and various versions of Oracle Application Server Web Cache.
What information can be exposed due to CVE-2002-0562?
CVE-2002-0562 can expose sensitive information including usernames and passwords through direct HTTP access.
Is CVE-2002-0562 still a concern for modern systems?
While CVE-2002-0562 originated in older versions, organizations using obsolete Oracle products may still face risks associated with this vulnerability.