Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2010-0386
HistoryJan 25, 2010 - 7:30 p.m.

CVE-2010-0386

2010-01-2519:30:00
CWE-16
[email protected]
web.nvd.nist.gov
355
cve-2010-0386
sun java system application server
http trace method
remote attackers
cookies
authentication credentials
cross-site tracing (xst) attack
nvd

6.1 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

67.9%

JSON

The default configuration of Sun Java System Application Server 7 and 7 2004Q2 enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing (XST) attack, a related issue to CVE-2004-2763 and CVE-2005-3398.

Related

prion 3
checkpoint_advisories 1
openvas 7
f5 2
cve 4
nessus 6
pentestpartners 1
redhatcve 1
prion
prion
Design/Logic Flaw
2010-01-25 19:30:00
Design/Logic Flaw
2010-01-25 19:30:00
Cross site scripting
2007-06-04 17:30:00
checkpoint_advisories
checkpoint_advisories
Update Protection against Sun Java System Application Server HTTP TRACE Vulnerability
2010-02-01 00:00:00
openvas
openvas
Sun Java System Application Server Cross Site Tracing Vulnerability
2010-02-08 00:00:00
Sun Java System Application Server Cross-Site Tracing Vulnerability
2010-02-08 00:00:00
HTTP Debugging Methods (TRACE/TRACK) Enabled
2005-11-03 00:00:00
f5
f5
K15904 : Multiple third-party application-server vulnerabilities
2014-12-11 00:00:00
SOL15904 - Multiple third-party application-server vulnerabilities
2014-12-11 00:00:00
cve
cve
CVE-2008-7253
2010-01-25 19:30:00
CVE-2005-3398
2005-11-01 12:47:00
CVE-2004-2763
2009-06-01 22:30:00
nessus
nessus
HTTP TRACE / TRACK Methods Allowed
2003-01-23 00:00:00
Solaris 9 (sparc) : 116807-02
2004-07-12 00:00:00
Solaris 9 (x86) : 116808-02
2004-07-12 00:00:00
pentestpartners
pentestpartners
Vulnerabilities that aren’t. Cross Site Tracing / XST
2022-01-25 06:08:46
redhatcve
redhatcve
CVE-2007-3008
2015-10-30 09:28:33

6.1 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

67.9%

JSON
Related for CVE-2010-0386
prion3checkpoint_advisories1openvas7f52cve4nessus6pentestpartners1redhatcve1