Skip to content
OpenAdvisories

Archive

30 September 2013

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Low —

    Missing Cryptographic Step in OWASP Enterprise Security API for Java

    The authenticated-encryption feature in the symmetric-encryption implementation in the OWASP Enterprise Security API (ESAPI) for Java 2.x before 2.1.0 does not properly resist tampering with serialized ciphertext, which makes it easier for remote attackers to…