CVE-2010-3300
N/A
N/A
Summary
It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | OWASP ESAPI | OWASP ESAPI for Java up to version 2.0 RC2 | affected |
Weaknesses
- CWE-649: CWE-649
ADP Enrichment
CVE Program Container
Additional References
- https://www.usenix.org/legacy/events/woot10/tech/full_papers/Rizzo.pdf
- https://seclists.org/oss-sec/2010/q3/357
References
- https://www.usenix.org/legacy/events/woot10/tech/full_papers/Rizzo.pdf
- https://seclists.org/oss-sec/2010/q3/357
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.