CVE-2010-3300 Padding oracle attacks
MediumCVSS 5.9
EPSS 0.45%
- Published
- Updated
- Exploit status
- No public exploit known
Description
It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.owasp.esapi/esapi(Maven) | < 2.0GA | 2.0GA |
| owasp enterprise security api for java | < 2.0 | 2.0 |
| owasp enterprise security api for java | = 2.0 | No fix listed |
| owasp enterprise security api for java | = 2.0-rc1 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- seclists.org mailing-list third-party-advisory
- www.usenix.org third-party-advisory
- github.com