medium5.0
CVE-2010-4007
Oracle Mojarra uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remote attackers to perform successful modif…
Impact
Oracle Mojarra uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remote attackers to perform successful modifications of the View State via a padding oracle attack, a related issue to CVE-2010-2057.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Mojarra | Versions 1.1, 1.1_02, 1.2, 1.2_01, 1.2_02, 1.2_03 |