CVE
- Id
- 46591
- CVE No.
- CVE-2010-4007
- Status
- Candidate
- Description
- Oracle Mojarra uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remote attackers to perform successful modifications of the View State via a padding oracle attack, a related issue to CVE-2010-2057.
- Phase
- Assigned (20101020)
- Votes
- None (candidate not yet proposed)
- Comments