Cleartext Storage of SYSMAN Password in Oracle 10g Database Server

CVE-2004-1366 · MEDIUM Severity

AV:L/AC:L/AU:N/C:P/I:P/A:P

Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA privileges.

Learn more about our Cis Benchmark Audit For Server Software.