David Litchfield, principal researcher of Next-Generation Security Software, disclosed a critical vulnerability in Oracle’s application and Web software during a presentation at the Black Hat Federal security conference. Litchfield notified Oracle of the problem last October, and he also published a workaround the same day as his Black Hat presentation.
Duncan Harris, senior director of security assurance for Oracle, condemned this responsible behaviour, "What David Litchfield has done is put our customers at risk."