Database Reference
In-Depth Information
Figure 18-14.
EM Admin without Super Administrator
If you do get locked out of a DB account earlier than you would expect, don't be paranoid that someone has
locked you out purposefully without considering this bug in EM:
Doc ID 1530236.1
-
An Account With a Value of 10 FAILED_LOGIN_ATTEMPTS is Locked After 4 Failed Login
Attempts to a Database in Cloud Control 12c.
Security Issues Exposed
There are much more important things to be paranoid about in EM - namely the version of the database used in
EM 12.1. is 11.1, which has a large number of serious security vulnerabilities as shown in the next section.
Hacking the Repository
McAfee's DB Security scanner shown in Figures
18-15
and
18-16
lists some of the security issues affecting the RDBMS
used for protecting the controls to the whole DB estate in EM12c. There are many ways of either breaking into the
EM12c repository or escalating privilege because the version of the EM DB is too old.
