Integrigy Security Alert – The Oracle Applications AOL/J Setup Test Suite, used to trouble-shoot the Self-Service framework, can be exploited to remotely retrieve sensitive configuration and host information without application authentication. The AOL/J Setup Test Suite is installed by default for all 11i implementations. A mandatory patch from Oracle is required to solve this security issue. Affected versions: 11.5.1 – 11.5.8.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/31435/integrigy.oracle2.txt
Source: https://packetstormsecurity.com/files/31435/integrigy.oracle2.txt.html