Oracle Application Server < 10.1.0.0.3 Privilege Escalation
Medium Nessus Network Monitor Plugin ID 2881
SynopsisThe remote host is vulnerable to a flaw that allows for the bypassing of authentication.
DescriptionThe remote host is running the Oracle Application Server. This version is reported vulnerable to a privilege escalation flaw. Specifically, users with the 'create job' privileges can obtain administrative access to the database. An attacker exploiting this flaw would need a valid account that had the ability to create new database jobs. Successful exploitation would result in the attacker being able to read or write confidential data.
SolutionUpgrade to version 10.1.0.0.3 or higher.