Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The manual installation of Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 stores the SYS password in install.lst in plaintext, which allows local users to gain privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Oracle HTML DB明文口令存储漏洞
Vulnerability Description
Oracle是一款大型的商业数据库系统,Oracle HTML DB是Oracle数据库的快速web应用开发工具。 Oracle HTML DB中存在明文存储口令漏洞。在手动安装时,应用程序在文件系统中以明文文件存储"SYS"用户的口令。本地攻击者可以访问这个文件,并检索到口令,获得管理权限访问。
CVSS Information
N/A
Vulnerability Type
N/A