Description (CNA)
It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / OWASP ESAPI | affected OWASP ESAPI for Java up to version 2.0 RC2 |
CWE
CWE-649
References
- https://www.usenix.org/legacy/events/woot10/tech/full_papers/Rizzo.pdf
- https://seclists.org/oss-sec/2010/q3/357
ADP enrichment
No English description supplied.