CVE-2002-0568: Low severity oracle oracle9i vulnerability
Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sensitive information including usernames and passwords by requesting (1) XSQLConfig.xml or (2) soapConfig.xml through a virtual directory.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0568?
CVE-2002-0568 is considered a high severity vulnerability due to the potential exposure of sensitive information such as usernames and passwords.
How do I fix CVE-2002-0568?
To fix CVE-2002-0568, secure the access to XSQLConfig.xml and soapConfig.xml files by restricting permission settings so that only authorized users can access them.
Who is affected by CVE-2002-0568?
CVE-2002-0568 affects users of Oracle 9i Application Server and potentially Oracle 8i versions with insecure file storage configurations.
What type of attack does CVE-2002-0568 enable?
CVE-2002-0568 enables local users to perform unauthorized access attacks to read sensitive configuration files.
What are the main configuration files involved in CVE-2002-0568?
The main configuration files involved in CVE-2002-0568 are XSQLConfig.xml and soapConfig.xml.