CVE

Id
46591  
CVE No.
CVE-2010-4007  
Status
Candidate  
Description
Oracle Mojarra uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remote attackers to perform successful modifications of the View State via a padding oracle attack, a related issue to CVE-2010-2057.  
Phase
Assigned (20101020)  
Votes
None (candidate not yet proposed)  
Comments