CVE-2010-3300

It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks.

Score

CVSS 3.1 5.9 Medium

Status

Modified - secalert@redhat.com

Published

2021-06-22

Last modified

2024-08-07

Weaknesses

CWE-649

Affected products

• Enterprise Security Api For Java (Owasp)

References

• https://seclists.org/oss-sec/2010/q3/357
• https://www.usenix.org/legacy/events/woot10/tech/full_papers/Rizzo.pdf