Oracle 10g Express Edition Cookie's issue

April 20, 2008

Oracle 10g Express Edition does not invalidate the cookie www_flow_user2 on server when the user logs off.

Tested in version:- Oracle 10g Express edition, other versions may also be vulnerable.

Patch:- Oracle CPU April 2008


Leave a Reply

Your email address will not be published. Required fields are marked *