← Database

CVE-2006-0270

CRITICAL CVSS: 10.0 Published: 2006-01-18 Modified: 2026-06-16

Description

Unspecified vulnerability in the Transparent Data Encryption (TDE) Wallet component of Oracle Database server 10.2.0.1 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB27. NOTE: Oracle has not disputed a reliable researcher report that TDA stores the master key without encryption, which allows local users to obtain the key via the SGA.

Affected Platforms

Oracle Database Server

Weakness Type

CWE-310, NVD-CWE-noinfo

References