CVE-1999-1256
CVSS 2.0 Score 4.6 of 10 (medium)
Details
Published Mar 4, 1999
Updated: Nov 20, 2024
Summary
CVE-1999-1256 is a vulnerability affecting the Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition. When a new database is created, the database master password is stored in plaintext within the spoolmain.log file. This issue exposes the master password to local users, posing a significant security risk. By accessing this file, an attacker can obtain the password and gain unauthorized access to the Oracle database system. This vulnerability underscores the importance of securely managing database credentials and configurations.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Vendors
- BonqDAO