rwcgi60 CGI program in Oracle Reports Server, by design, provides sensitive information such as the full pathname, which could enable remote attackers to use the information in additional attacks.
| Software | From | Fixed in |
|---|---|---|
| oracle / reports | 6.0.8.19 | 6.0.8.19.x |
| oracle / reports | 6.0.8 | 6.0.8.x |
| oracle / application_server | 9.0.2 | 9.0.2.x |