CVE-2009-1197

EUVD-2009-1196
Apache jUDDI before 2.0 allows attackers to spoof entries in log files via vectors related to error logging of keys from uddiget.jsp.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 60%
Affected Products (NVD)
VendorProductVersion
apachejuddi
0.9:rc1
apachejuddi
0.9:rc2
apachejuddi
0.9:rc3
apachejuddi
0.9:rc4
apachejuddi
2.0:rc5
apachejuddi
2.0:rc6
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://issues.apache.org/jira/browse/JUDDI-220
http://marc.info/?l=juddi-dev&m=125000625404010&w=2
http://www.securityfocus.com/bid/101625
http://issues.apache.org/jira/browse/JUDDI-220
http://marc.info/?l=juddi-dev&m=125000625404010&w=2
http://www.securityfocus.com/bid/101625