Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2010-2057

shared/util/StateUtils.java in Apache MyFaces 1.1.x before 1.1.8, 1.2.x before 1.2.9, and 2.0.x before 2.0.1 uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remote attackers to perform successful modifications of the View State via a padding oracle attack.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 73.3%
CVSS Severity
CVSS v2 Score 5.0
Products affected by CVE-2010-2057
  • Apache » Myfaces » Version: 1.1.0
    cpe:2.3:a:apache:myfaces:1.1.0
  • Apache » Myfaces » Version: 1.1.1
    cpe:2.3:a:apache:myfaces:1.1.1
  • Apache » Myfaces » Version: 1.1.2
    cpe:2.3:a:apache:myfaces:1.1.2
  • Apache » Myfaces » Version: 1.1.3
    cpe:2.3:a:apache:myfaces:1.1.3
  • Apache » Myfaces » Version: 1.1.4
    cpe:2.3:a:apache:myfaces:1.1.4
  • Apache » Myfaces » Version: 1.1.5
    cpe:2.3:a:apache:myfaces:1.1.5
  • Apache » Myfaces » Version: 1.1.6
    cpe:2.3:a:apache:myfaces:1.1.6
  • Apache » Myfaces » Version: 1.1.7
    cpe:2.3:a:apache:myfaces:1.1.7
  • Apache » Myfaces » Version: 1.2.2
    cpe:2.3:a:apache:myfaces:1.2.2
  • Apache » Myfaces » Version: 1.2.3
    cpe:2.3:a:apache:myfaces:1.2.3
  • Apache » Myfaces » Version: 1.2.4
    cpe:2.3:a:apache:myfaces:1.2.4
  • Apache » Myfaces » Version: 1.2.5
    cpe:2.3:a:apache:myfaces:1.2.5
  • Apache » Myfaces » Version: 1.2.6
    cpe:2.3:a:apache:myfaces:1.2.6
  • Apache » Myfaces » Version: 1.2.7
    cpe:2.3:a:apache:myfaces:1.2.7
  • Apache » Myfaces » Version: 1.2.8
    cpe:2.3:a:apache:myfaces:1.2.8
  • Apache » Myfaces » Version: 2.0.0
    cpe:2.3:a:apache:myfaces:2.0.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved