{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"toutes les versions de Oracle Applications.","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Toutes les versions de Oracle E-Business Suite 11i ;","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}}],"affected_systems_content":null,"content":"## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s pr\u00e9sentes dans l'application AOL/J Setup Test\npermet \u00e0 un utilisateur distant de r\u00e9cup\u00e9rer, sans authentification, des\ninformations de configuration du serveur cible tel que le mot de passe\nde l'utilisateur GUEST ou la cl\u00e9 de s\u00e9curit\u00e9 de l'application.\n\n## Solution\n\nAppliquer le correctif fourni par Oracle (cf. Documentation).\n","cves":[],"links":[{"title":"Oracle Security Alert 55 :","url":"http://otn.oracle.com/deploy/security/pdf/2003alert55.pdf"}],"reference":"CERTA-2003-AVI-120","revisions":[{"description":"version initiale.","revision_date":"2003-07-25T00:00:00.000000"}],"risks":[{"description":"Acc\u00e8s \u00e0 des informations syst\u00e8me"}],"summary":"Un utilisateur distant mal intentionn\u00e9 peut avoir acc\u00e8s aux informations\nconcernant la configuration des applications Oracle de la machine cible.\n","title":"Vuln\u00e9rabilit\u00e9 dans la suite Oracle E-Business","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Oracle N\u02da55","url":null}]}