← Back

CVE-2010-3300

nvd nist
Published: Jun 22, 2021Modified: Nov 21, 2024

JSON object

Loading...
5.9
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.2 / Impact: 3.6
Source: NVD

Description

It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks.

Affected (3)

Owasp
1 product
Enterprise Security Api For Java
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Owasp
Enterprise Security Api For Java
Before 2.0
Enterprise Security Api For Java
Version 2.0
Enterprise Security Api For Java
Version 2.0 rc1

Related CWEs

CWE-649
Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking
The product uses obfuscation or encryption of inputs that should not be mutable by an external actor, but the product does not use integrity checks to detect if those inputs have been modified.

References (4)

Source: secalert@redhat.com
Mailing ListThird Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.