← Database

CVE-2010-0009

MEDIUM CVSS: 4.3 Published: 2010-04-05 Modified: 2026-06-16

Description

Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1) hashes or (2) passwords.

Affected Platforms

Apache Couchdb

Weakness Type

CWE-200

References