Log Spoofing

2019-03-2508:40:44

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

65.9%

JSON

Apache jUDDI is vulnerable to log spoofing. An error with the logging of keys allow an attacker to spoof entries in the log files, such as creating a false entry for a non-existent action.

CPENameOperatorVersion
juddieq2.0.0
juddile2.0rc6

CPE	Name	Operator	Version
	juddi	eq	2.0.0
	juddi	le	2.0rc6

References

issues.apache.org/jira/browse/JUDDI-220

0.003 Low

EPSS

Percentile

65.9%

JSON

Related for VERACODE:13531