Lucene search
RedhatCVELIST:CVE-2010-2057HistoryOct 20, 2010 - 5:00 p.m.
CVE-2010-2057
2010-10-2017:00:00
redhat
www.cve.org
shared/util/StateUtils.java in Apache MyFaces 1.1.x before 1.1.8, 1.2.x before 1.2.9, and 2.0.x before 2.0.1 uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remote attackers to perform successful modifications of the View State via a padding oracle attack.
Related
github
github
Improper Authentication in Apache MyFaces
2022-05-17 05:45:54
osv
osv
Improper Authentication in Apache MyFaces
2022-05-17 05:45:54
cve
cve
CVE-2010-2057
2010-10-20 18:00:02
CVE-2010-4007
2022-10-03 16:21:06
prion
prion
Authentication flaw
2010-10-20 18:00:00
Sql injection
2010-10-20 18:00:00
nvd
nvd
CVE-2010-2057
2010-10-20 18:00:02
CVE-2010-4007
2010-10-20 18:00:04
cvelist
cvelist
CVE-2010-4007
2022-10-03 16:21:06
debiancve
debiancve
CVE-2010-4007
2022-10-03 16:21:06