It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks.
References
Link | Resource |
---|---|
https://www.usenix.org/legacy/events/woot10/tech/full_papers/Rizzo.pdf | Third Party Advisory |
https://seclists.org/oss-sec/2010/q3/357 | Mailing List Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2021-06-22 05:15
Updated : 2021-06-25 10:38
NVD link : CVE-2010-3300
Mitre link : CVE-2010-3300
JSON object : View
CWE
CWE-649
Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking
Products Affected
owasp
- enterprise_security_api_for_java