CVE-2008-6869 Oramon Oracle Database Monitoring Tool 2.0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentia...
MediumCVSS 5.0
EPSS 6.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Oramon Oracle Database Monitoring Tool 2.0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for config/oramon.ini.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oramon | = 2.0.1 | No fix listed |
References
- ADV-2008-3305 vdb-entry vendor-advisory
- oramon-oramon-information-disclosure(46967) vdb-entry
- 7286 exploit