• info
• discussion
• exploit
• solution
• references

Oracle Single Sign-On Login Page Authentication Credential Disclosure Vulnerability

No exploit is required to leverage this issue.