← Database

CVE-2002-0564

HIGH CVSS: 7.5 Published: 2002-07-03 Modified: 2026-06-16

Description

PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to bypass authentication for a Database Access Descriptor (DAD) by modifying the URL to reference an alternate DAD that already has valid credentials.

Affected Platforms

Oracle Application Server Web CacheOracle Application ServerOracle Oracle8IOracle Oracle9I

Weakness Type

NVD-CWE-Other

References