source: http://www.securityfocus.com/bid/29119/info Oracle Application Server Portal is prone to a authentication-bypass vulnerability because the application fails to properly restrict access to certain resources. An attacker can exploit this vulnerability to bypass certain security restrictions and gain access to potentially sensitive contents of the portal. Oracle Application Server Portal 10g is vulnerable to this issue; other versions may also be affected. Visiting the 'http://www.example.com/portal/%0A' site will create a cookie sufficient to trigger the issue and access 'http://www.example.com/dav_portal/porta/' without authorization.
Related ExploitsTrying to match CVEs (1): CVE-2008-2138
Trying to match OSVDBs (1): 45172
Other Possible E-DB Search Terms: Oracle Application Server Portal 10g, Oracle Application Server Portal