{"id":"CVE-2012-3137","url":"https://www.cyber-defence.io/tools/cve/CVE-2012-3137","generatedAt":"2026-11-05T08:05:27.740Z","title":"The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote attackers to obtain the session key and salt for arbitrary users, which leaks information about the cryptographic hash and…","description":"The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote attackers to obtain the session key and salt for arbitrary users, which leaks information about the cryptographic hash and makes it easier to conduct brute force password guessing attacks, aka \"stealth password cracking vulnerability.\"","published":"2012-09-21T23:55:01.000Z","lastModified":"2026-06-16T23:42:39.000Z","status":"Modified","sourceIdentifier":"secalert_us@oracle.com","cvss":{"version":"2.0","score":6.4,"severity":"MEDIUM","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N"},"cwe":["CWE-287"],"affected":["oracle/database server","oracle/primavera p6 enterprise project portfolio management"],"epss":{"score":0.31437,"percentile":0.98288,"date":"2026-11-04","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":false,"firstPublished":"2012-10-18","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":22069,"kind":"exploit","title":"Oracle Database - Protocol Authentication Bypass","url":"https://www.exploit-db.com/exploits/22069","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/local/22069.py","file":"exploits/multiple/local/22069.py","published":"2012-10-18","added":"2012-10-18","updated":"2016-11-12","author":"Esteban Martinez Fayo","type":"local","platform":"multiple","port":null,"verified":false,"codes":["CVE-2012-3137","OSVDB-85863"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://www.securityfocus.com/bid/55651/info"}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 31.4%, higher than 98% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://arstechnica.com/security/2012/09/oracle-database-stealth-password-cracking-vulnerability/","tags":["Press/Media Coverage"],"source":"secalert_us@oracle.com"},{"url":"http://threatpost.com/en_us/blogs/flaw-oracle-logon-protocol-leads-easy-password-cracking-092012?utm_source=Threatpost&utm_medium=Tabs&utm_campaign=Today%27s+Most+Popular","tags":["Press/Media Coverage"],"source":"secalert_us@oracle.com"},{"url":"http://www.darkreading.com/authentication/167901072/security/application-security/240007643/attack-easily-cracks-oracle-database-passwords.html","tags":["Press/Media Coverage"],"source":"secalert_us@oracle.com"},{"url":"http://www.exploit-db.com/exploits/22069","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"secalert_us@oracle.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","tags":["Broken Link"],"source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","tags":["Patch","Vendor Advisory"],"source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html","tags":["Patch","Vendor Advisory"],"source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/55651","source":"secalert_us@oracle.com"},{"url":"http://arstechnica.com/security/2012/09/oracle-database-stealth-password-cracking-vulnerability/","tags":["Press/Media Coverage"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://threatpost.com/en_us/blogs/flaw-oracle-logon-protocol-leads-easy-password-cracking-092012?utm_source=Threatpost&utm_medium=Tabs&utm_campaign=Today%27s+Most+Popular","tags":["Press/Media Coverage"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.darkreading.com/authentication/167901072/security/application-security/240007643/attack-easily-cracks-oracle-database-passwords.html","tags":["Press/Media Coverage"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/22069","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","tags":["Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html","tags":["Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/55651","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-3137","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}