CVE-2010-3299

2019-11-1220:55:04

redhat

www.cve.org

EPSS

0.005

Percentile

75.9%

JSON

The encrypt/decrypt functions in Ruby on Rails 2.3 are vulnerable to padding oracle attacks.

CNA Affected

[
  {
    "product": "rails",
    "vendor": "rails",
    "versions": [
      {
        "status": "affected",
        "version": "2.3"
      }
    ]
  }
]

References

access.redhat.com/security/cve/cve-2010-3299

seclists.org/oss-sec/2010/q3/357

security-tracker.debian.org/tracker/CVE-2010-3299

www.usenix.org/legacy/events/woot10/tech/full_papers/Rizzo.pdf

EPSS

0.005

Percentile

75.9%

JSON

Related for CVELIST:CVE-2010-3299