Oracle Application Server Credentials Management Errors Vulnerability - CVE-2004-1366 - Vulnerability Database

Oracle Application Server Credentials Management Errors Vulnerability - CVE-2004-1366

Medium

Reference: CVE-2004-1366

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2004-1366

Title: Oracle Application Server Credentials Management Errors Vulnerability

Overview:

Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file which could allow local users to gain DBA privileges.