Description
Oracle Formsbuilder 9.0.4 stores database usernames and passwords in a temporary file, which is not deleted after it is used, which allows local users to obtain sensitive information.
References
- formsbuilder-temp-file-plaintext-password(21343) vdb-entry
- 15991 third-party-advisory
- 20050713 Advisory: Oracle Forms Builder Password in Temp Files mailing-list
- http://www.red-database-security.com/advisory/oracle_formsbuilder_temp_file_issue.html
- http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html