CVE-2009-1198

概要

参考情報

• issues.apache.org/jira/browse/JUDDI-221 · Issue Tracking
• marc.info · Mailing List
• securityfocus.com/bid/101623 · Third Party Advisory

juddi のその他の脆弱性

• CVE-2021-37578緊急 9.8Apache jUDDI uses several classes related to Java's Remote Method Invocation (RMI) which (as an extension to UDDI) provides an alternate tra…
• CVE-2009-4267中 6.5The console in Apache jUDDI 3.0.0 does not properly escape line feeds, which allows remote authenticated users to spoof log entries via the …
• CVE-2018-1307高 8.1In Apache jUDDI 3.2 through 3.3.4, if using the WADL2Java or WSDL2Java classes, which parse a local or remote XML document and then mediates…
• CVE-2009-1197中 5.3Apache jUDDI before 2.0 allows attackers to spoof entries in log files via vectors related to error logging of keys from uddiget.jsp.
• CVE-2015-5241中 6.1After logging into the portal, the logout jsp page redirects the browser back to the login page after. It is feasible for malicious users to…