CVE-2010-0009

Опубликовано: 31 мар. 2010

Источник: redhat

CVSS2: 4.3

Описание

Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1) hashes or (2) passwords.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

https://bugzilla.redhat.com/show_bug.cgi?id=578572Apache CouchDB v0.10.0 prone to timing attacks vulnerability

4.3 Medium

CVSS2

Связанные уязвимости

CVE-2010-0009

ubuntu

больше 15 лет назад

Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1) hashes or (2) passwords.

CVE-2010-0009

nvd

больше 15 лет назад

Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1) hashes or (2) passwords.

CVE-2010-0009

debian

больше 15 лет назад

Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain ...

GHSA-jwf7-c2x3-76h8

github

больше 3 лет назад

Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1) hashes or (2) passwords.

4.3 Medium

CVSS2