owa_util.signature?

[tomwang1]

Hi,

My web application has a security issue -  unauthenticated PUBLIC access to PL/SQL procedures and applications.

http://myserver/arcgis/rest/services/owa_util.signature

Is PrintTask using this? Please advise!

Thanks,

Tom

[RandallWilliams]

Sorry for the very late reply. There's no Oracle Middleware involved here. This is a false positive.

https://docs.oracle.com/cd/E28280_01/portal.1111/e12042/psutil.htm#YPREF441

If you review the response to the GET request, you won't see a line like 'This page was produced by the PL/SQL Agent on <some date>',