CVE-2010-3300: Medium severity owasp enterprise security api vulnerability
Published Jun 22, 2021
·Updated
It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks.
Affected Software
3 affected components
OWASP Enterprise Security Api For Java<2.0
OWASP Enterprise Security Api For Java=2.0
OWASP Enterprise Security Api For Java=2.0-rc1
Event History
Jun 22, 2021
CVE Published
via MITRE·11:56 AM
Data Sourced
via MITRE·11:56 AM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2010-3300?
CVE-2010-3300 is a vulnerability found in all OWASP ESAPI for Java up to version 2.0 RC2 that makes them vulnerable to padding oracle attacks.
2
What is the severity of CVE-2010-3300?
CVE-2010-3300 has a severity rating of medium, with a severity value of 5.9.
3
How does CVE-2010-3300 affect OWASP ESAPI for Java?
CVE-2010-3300 affects all OWASP ESAPI for Java up to version 2.0 RC2, making them vulnerable to padding oracle attacks.
4
How can I fix the CVE-2010-3300 vulnerability?
To fix the CVE-2010-3300 vulnerability, it is recommended to update OWASP ESAPI for Java to a version beyond 2.0 RC2.
5
Where can I find more information about CVE-2010-3300?
More information about CVE-2010-3300 can be found at the following references: [link1], [link2].