VDB
GCVE-110-MAGEIA-2015-64
GCVE-110-MAGEIA-2015-64
Advisory Published
Updated owasp-esapi-java packages fix security vulnerability:
The authenticated-encryption feature in the symmetric-encryption
implementation in the OWASP Enterprise Security API (ESAPI) for Java 2.x
before 2.1.0 does not properly resist tampering with serialized ciphertext,
which makes it easier for remote attackers to bypass intended cryptographic
protection mechanisms via an attack against authenticity in the default
configuration, involving a null MAC and a zero MAC length (CVE-2013-5679).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | owasp-esapi-java | 0 (affected), 2.1.0-1.mga4 (unaffected) | — |
Browse GCVE Records
6,043 records in the GCVE database · Updated October 20, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.