Vulnerability in Oracle Jdeveloper

CVE-2005-2291

Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 passes the cleartext password as a parameter when starting sqlplus, which allows local users to gain sensitive information.

EPSS: 0.005 (40.7th percentile) — read the EPSS interpretation.

Affected products

Oracle Jdeveloper — versions 9.0.4, 9.0.5, 10.1.2
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Patch, x_refsource_MISC, Vendor Advisory)