CVE-2010-0009 Information disclosure in n/a

What is CVE-2010-0009?

CVE-2010-0009 is a medium-severity vulnerability in n/a, published on 5 Apr 2010. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1) hashes or (2) passwords.

Weakness: CWE-200

Which versions are affected by CVE-2010-0009?

It affects 1 product.

Products include Apache Couchdb.

How do I fix CVE-2010-0009?

No fix has been published for CVE-2010-0009 yet. Limit exposure of the affected software until one is available.

Is CVE-2010-0009 being exploited?

There is no known exploitation of CVE-2010-0009 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2022-24706 Apache CouchDB Insecure Default Initialization of Resource Exploited Critical 9.8
• CVE-2020-1955 Auth bypass in Apache CouchDB Critical 9.8
• CVE-2017-12635 Privilege escalation in Apache CouchDB Critical 9.8
• CVE-2018-14889 Code injection in n/a High 7.8
• CVE-2016-8742 Privilege escalation in Apache CouchDB High 7.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-jwf7-c2x3-76h8.