1. Home
  2. Vulnerabilities
  3. CVE-2010-10006

CVE-2010-10006

CVSS v3.1 7.5 (High)
75% Progress
CVSS v2.0 1.4 (Low)
14% Progress
EPSS 1.01 % (84th)
1.01% Progress
Affected Products 1
Advisories 1
NVD Status Modified
Info CVSS EPSS CAPEC Affected Configurations References Security Advisories Packages & Software Graph Web & Social Timeline

A vulnerability, which was classified as problematic, was found in michaelliao jopenid. Affected is the function getAuthentication of the file JOpenId/src/org/expressme/openid/OpenIdManager.java. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high. The exploitability is told to be difficult. Upgrading to version 1.08 is able to address this issue. The name of the patch is c9baaa976b684637f0d5a50268e91846a7a719ab. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-218460.

Weaknesses
CWE-203
Observable Discrepancy
CWE-208
Observable Timing Discrepancy
CVE Status
PUBLISHED
NVD Status
Modified
CNA
VulDB
Published Date
2023-01-18 00:15:11
(20 months ago)
Updated Date
2024-05-17 00:45:57
(4 months ago)

Affected Products

Jopenid Project

Configuration #1

    CPE23 From Up To
  Jopenid Project Jopenid prior 1.08 version cpe:2.3:a:jopenid_project:jopenid < 1.08