BID:13890

ObjectWeb Consortium C-JDBC Query Result Cache Disclosure Vulnerability

Info

ObjectWeb Consortium C-JDBC Query Result Cache Disclosure Vulnerability

Bugtraq ID:	13890
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 06 2005 12:00AM
Updated:	Jun 06 2005 12:00AM
Credit:	The vendor announced this issue.
Vulnerable:	ObjectWeb Consortium C-JDBC 1.3 ObjectWeb Consortium C-JDBC 1.2.1 ObjectWeb Consortium C-JDBC 1.2 ObjectWeb Consortium C-JDBC 1.1 ObjectWeb Consortium C-JDBC 1.0.4 ObjectWeb Consortium C-JDBC 1.0.3 ObjectWeb Consortium C-JDBC 1.0.2 ObjectWeb Consortium C-JDBC 1.0.1 ObjectWeb Consortium C-JDBC 1.0

Not Vulnerable:	ObjectWeb Consortium C-JDBC 1.3.1

Discussion

ObjectWeb Consortium C-JDBC Query Result Cache Disclosure Vulnerability

C-JDBC is affected by an information disclosure vulnerability.

An attacker can obtain other users' query result caches and gain access to potentially sensitive information.

C-JDBC 1.3 and prior versions are affected.

Exploit / POC

ObjectWeb Consortium C-JDBC Query Result Cache Disclosure Vulnerability

An exploit is not required.

Solution / Fix

ObjectWeb Consortium C-JDBC Query Result Cache Disclosure Vulnerability

Solution:
The vendor has released C-JDBC 1.3.1 to address this issue.

ObjectWeb Consortium C-JDBC 1.0