CVE-2009-1197 - Apache jUDDI before 2.0 allows attackers to spoof entries in log files via vectors related to error logging of keys from uddiget.jsp

MEDIUM

Apache jUDDI before 2.0 allows attackers to spoof entries in log files via vectors related to error logging of keys from uddiget.jsp

Published Oct 30, 2017

5.3

MEDIUM

CVSS 3.0

EPSS 4.11%

Apache jUDDI before 2.0 allows attackers to spoof entries in log files via vectors related to error logging of keys from uddiget.jsp.

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

Link	Providers	Tags
http://issues.apache.org/jira/browse/JUDDI-220		x_refsource_CONFIRMIssue Tracking
http://marc.info/?l=juddi-dev&m=125000625404010&w=2		mailing-listx_refsource_MLISTMailing List
http://www.securityfocus.com/bid/101625		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-1196		Advisory