← Back

CVE-2002-0565

nvd nist
Published: Jul 3, 2002Modified: Apr 16, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

Oracle 9iAS 1.0.2.x compiles JSP files in the _pages directory with world-readable permissions under the web root, which allows remote attackers to obtain sensitive information derived from the JSP code, including usernames and passwords, via a direct HTTP request to _pages.

Affected (7)

Oracle
3 products
Application Server
Application Server Web Cache
Oracle9i
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Application Server
Version 1.0.2
Oracle
Application Server Web Cache
Version 2.0.0.0
Application Server Web Cache
Version 2.0.0.1
Application Server Web Cache
Version 2.0.0.2
Application Server Web Cache
Version 2.0.0.3
Oracle
Oracle9i
Version 9.0.1
Oracle9i
Version 9.0

References (12)

Source: cve@mitre.org
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
PatchThird Party AdvisoryUS Government Resource
Source: cve@mitre.org
US Government Resource
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.