CVE-2010-0009

Опубликовано: 05 апр. 2010

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1) hashes or (2) passwords.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:couchdb:0.8.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:couchdb:0.8.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:couchdb:0.9.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:couchdb:0.9.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:couchdb:0.9.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:couchdb:0.10.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:couchdb:0.10.1:*:*:*:*:*:*:*

EPSS

Процентиль: 70%

0.00643

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2010-0009

ubuntu

больше 15 лет назад

Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1) hashes or (2) passwords.

CVE-2010-0009

redhat

больше 15 лет назад

Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1) hashes or (2) passwords.

CVE-2010-0009

debian

больше 15 лет назад

Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain ...

GHSA-jwf7-c2x3-76h8

github

больше 3 лет назад

Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1) hashes or (2) passwords.

EPSS

Процентиль: 70%

0.00643

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-200