Lucene search
OpenSSLOPENSSL:CVE-2010-4252HistoryDec 02, 2010 - 12:00 a.m.
Vulnerability in OpenSSL CVE-2010-4252
2010-12-0200:00:00
www.openssl.org
39
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.9
Confidence
High
EPSS
0.03
Percentile
91.0%
An error in OpenSSL's experimental J-PAKE implementation which could lead to successful validation by someone with no knowledge of the shared secret. The OpenSSL Team still consider the implementation of J-PAKE to be experimental and is not compiled by default.
Related
cvelist
cvelist
CVE-2010-4252
2010-12-06 21:00:00
CVE-2010-4478
2010-12-06 22:00:00
cve
cve
CVE-2010-4252
2010-12-06 21:05:49
CVE-2010-4478
2010-12-06 22:30:31
debiancve
debiancve
CVE-2010-4252
2010-12-06 21:05:49
CVE-2010-4478
2010-12-06 22:30:31
ubuntucve
ubuntucve
CVE-2010-4252
2010-12-06 00:00:00
CVE-2010-4478
2010-12-06 00:00:00
openvas
openvas
F5 BIG-IP - OpenSSL vulnerability CVE-2010-4252
2015-10-14 00:00:00
OpenSSL: JPAKE validation error (20101202) - Linux
2021-08-16 00:00:00
OpenSSL: JPAKE validation error (20101202) - Windows
2021-08-16 00:00:00
nessus
nessus
F5 Networks BIG-IP : OpenSSL vulnerability (K17382)
2015-10-12 00:00:00
Slackware 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / current : openssl (SSA:2010-340-01)
2010-12-08 00:00:00
OpenSSL 1.0.0 < 1.0.0c Multiple Vulnerabilities
2010-12-07 00:00:00
prion
prion
Design/Logic Flaw
2010-12-06 21:05:00
Design/Logic Flaw
2010-12-06 22:30:00
nvd
nvd
CVE-2010-4252
2010-12-06 21:05:49
CVE-2010-4478
2010-12-06 22:30:31
f5
f5
K17382 : OpenSSL vulnerability CVE-2010-4252
2015-10-09 00:00:00
SOL17382 - OpenSSL vulnerability CVE-2010-4252
2015-10-09 00:00:00
attackerkb
attackerkb
CVE-2010-4478
2010-12-06 00:00:00
slackware
slackware
[slackware-security] openssl
2010-12-07 07:14:58
securityvulns
securityvulns
OpenSSL protection level downgrade
2010-12-09 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2011-10-09 00:00:00
ibm
ibm
vmware
vmware
VMware vSphere and vCOps updates to third party libraries
2012-08-30 00:00:00
VMware vSphere and vCOps updates to third party libraries
2012-08-30 00:00:00
lenovo
lenovo
Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US
2018-11-13 17:10:51
Intel® PROSet/Wireless WiFi Software Vulnerabilities - US
2018-11-13 17:10:51
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.9
Confidence
High
EPSS
0.03
Percentile
91.0%
Related for OPENSSL:CVE-2010-4252