← Back

CVE-2009-1197

nvd nist
Published: Oct 30, 2017Modified: May 13, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Exploitability: 3.9 / Impact: 1.4
Source: NVD

Description

Apache jUDDI before 2.0 allows attackers to spoof entries in log files via vectors related to error logging of keys from uddiget.jsp.

Affected (6)

Products: Apache: Juddi
Apache
1 product
Juddi
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Apache
Juddi
Version 0.9 rc1
Juddi
Version 0.9 rc2
Juddi
Version 0.9 rc3
Juddi
Version 0.9 rc4
Juddi
Version 2.0 rc5
Juddi
Version 2.0 rc6

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (6)

Source: secalert@redhat.com
Issue Tracking
Source: secalert@redhat.com
Mailing List
Source: secalert@redhat.com
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Issue Tracking
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.