CVE-2010-0386

n/a / n/a PUBLISHED

Description (CNA)

The default configuration of Sun Java System Application Server 7 and 7 2004Q2 enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing (XST) attack, a related issue to CVE-2004-2763 and CVE-2005-3398.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

http://sunsolve.sun.com/search/document.do?assetkey=1-66-200942-1

ADP enrichment

CVE

No English description supplied.

http://sunsolve.sun.com/search/document.do?assetkey=1-66-200942-1

CISA-ADP

No English description supplied.

No references supplied.