CVE-2005-2293

Medium

Oracle Formsbuilder 9.0.4 stores database usernames and passwords in a temporary file, which is not deleted after it is used, which allows…

mitre·CWE-459·Published 2005-07-17

CVSS

5.5

EPSS

0.02

KEV

Exploits

cve.orgen

183 chars

Oracle Formsbuilder 9.0.4 stores database usernames and passwords in a temporary file, which is not deleted after it is used, which allows local users to obtain sensitive information.

NVDen

183 chars

Oracle Formsbuilder 9.0.4 stores database usernames and passwords in a temporary file, which is not deleted after it is used, which allows local users to obtain sensitive information.

Oracle Formsbuilder 9.0.4 almacena nombres de usuarios y claves de bases de datos en un fichero temporal (que no se borra después de haber sido usado). Esto permite que usuarios locales obtengan información confidencial.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:P/I:N/A:N
3.1	Primary	NVD	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N