Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The p_submit_url value in the sample login form in the Oracle 9i Application Server (9iAS) Single Sign-on Administrators Guide, Release 2(9.0.2) for Oracle SSO allows remote attackers to spoof the login page, which could allow users to inadvertently reveal their username and password.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Oracle Single Sign-On登录页验证信息泄露漏洞
Vulnerability Description
Oracle包含Single Sign-on应用程序，称为OSSO。 Single Sign-on包含的登录表单存在信息泄露问题，远程攻击者可以利用这个漏洞获得如用户名和密码等敏感信息。 这可诱使目标用户打开一个修改过URL参数的SSO登录页来完成。如果用户只检查主机证书，他们将不会注意到自己被欺骗。并且在登录后，会被重定向到正确的应用程序上，而不知道用户名和密码已泄露。 目前没有详细漏洞细节提供。
CVSS Information
N/A
Vulnerability Type
N/A