CVE-2005-2292

Published: Jul 18, 2005Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 stores cleartext passwords in (1) IDEConnections.xml, (2) XSQLConfig.xml and (3) settings.xml, which allows local users to obtain sensitive information.

Affected (3)

Products: Oracle: Jdeveloper

Oracle

1 product

Jdeveloper

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Oracle Jdeveloper	Version 10.1.2
Oracle Jdeveloper	Version 9.0.4
Oracle Jdeveloper	Version 9.0.5

References (10)

http://marc.info/?l=bugtraq&m=112129177927502&w=2

Source: cve@mitre.org

http://secunia.com/advisories/15991/

Source: cve@mitre.org

PatchVendor Advisory

http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.red-database-security.com/advisory/oracle_jdeveloper_plaintext_password.html

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/21342

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=112129177927502&w=2