Oracle Forms

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

BANNER GRABBING (Oracle Application Server)

user7226923Aug 8 2018 — edited Aug 9 2018

Application is disclosing server details through Header response; Banner Grabbing is possible in the application.

Open URL: http://10.80.221.138:8888/forms/java/oracle/forms/engine/ErrorMessageBundle_en_IN.properties and keeping the intercept on. Forward the
request to the server and capture the response. It is clearly seen that
application is disclosing server details to the end user as shown below:

Locked Post

New comments cannot be posted to this locked post.

Locked on Sep 6 2018

Added on Aug 8 2018

#forms, #moved-from-devops

2 comments

537 views