[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCUhIWxn26dYKYk2MW1odf39wjPWM3lUWSpP1rq7fNw4":3,"g5a-risk:CVE-2010-3852":168},{"success":4,"data":5,"meta":166},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":15,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":41,"references":42,"referencesCount":112,"weaknesses":113,"weaknessesCount":122,"isActivelyExploited":123,"cisaInfo":15,"otxData":15,"relatedBlogPosts":124,"seoMetadata":125,"configurations":150,"relatedVendorCves":164,"notableEvents":165},"CVE-2010-3852","What is CVE-2010-3852?","The default configuration of Luci 0.22.4 and earlier in Red Hat Conga uses \"[INSERT SECRET HERE]\" as its secret key for cookies, which makes it easier for remote attackers to bypass repoze.who authentication via a forged ticket cookie.","The default configuration of Luci 0.22.4 and earlier in Red Hat Conga uses \"[INSERT SECRET HERE]\" as its secret key for cookies, which makes it easier for re...","2010-11-06T00:00:02.423","2025-04-11T00:51:21.963",6.4,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":26,"ExploitabilityScore":27,"ImpactScore":28,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","LOW","NONE","PARTIAL","MEDIUM",10,4.9,0.02002,[29,29,29,29,29,29,29],"Medium",[33,38],{"vendor":34,"product":35,"version":36,"criteria":37,"vulnerable":4},"redhat","luci","*","cpe:2.3:a:redhat:luci:*:*:*:*:*:*:*:*",{"vendor":34,"product":39,"version":36,"criteria":40,"vulnerable":4},"conga","cpe:2.3:a:redhat:conga:*:*:*:*:*:*:*:*",2,[43,47,51,54,57,61,66,69,73,77,80,84,88,90,92,94,96,98,100,102,104,106,108,110],{"url":44,"source":45,"tags":46},"http:\u002F\u002Fgit.fedorahosted.org\u002Fgit\u002F?p=luci.git%3Ba=commit%3Bh=9e0bbf0c5faa198379d945474f7d55da5031cacf","Fedorahosted",[],{"url":48,"source":49,"tags":50},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2010-November\u002F050244.html","Fedoraproject",[],{"url":52,"source":49,"tags":53},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2010-November\u002F050246.html",[],{"url":55,"source":49,"tags":56},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2010-November\u002F050309.html",[],{"url":58,"source":59,"tags":60},"http:\u002F\u002Fosvdb.org\u002F69015","Osvdb",[],{"url":62,"source":63,"tags":64},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F42113","Secunia",[65],"Vendor Advisory",{"url":67,"source":63,"tags":68},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F42123",[65],{"url":70,"source":71,"tags":72},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F44611","Securityfocus",[],{"url":74,"source":75,"tags":76},"http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2010\u002F2873","Vupen",[65],{"url":78,"source":75,"tags":79},"http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2010\u002F2900",[],{"url":81,"source":82,"tags":83},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=626504","Red Hat",[],{"url":85,"source":86,"tags":87},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F62980","Ibmcloud",[],{"url":44,"source":45,"tags":89},[],{"url":48,"source":49,"tags":91},[],{"url":52,"source":49,"tags":93},[],{"url":55,"source":49,"tags":95},[],{"url":58,"source":59,"tags":97},[],{"url":62,"source":63,"tags":99},[65],{"url":67,"source":63,"tags":101},[65],{"url":70,"source":71,"tags":103},[],{"url":74,"source":75,"tags":105},[65],{"url":78,"source":75,"tags":107},[],{"url":81,"source":82,"tags":109},[],{"url":85,"source":86,"tags":111},[],24,[114],{"id":115,"name":116,"description":117,"extendedDescription":118,"status":119,"abstraction":120,"structure":121},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",1,false,[],{"title":126,"metaDescription":127,"keywords":128,"canonicalUrl":129,"structuredData":130},"What is CVE-2010-3852? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2010-3852, a medium severity cyber security vulnerability from 2010. The default configuration of Luci 0.22.4 and earlier in Re...","CVE-2010-3852, CVE-2010-3852 vulnerability, CVE-2010-3852 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2010, CVSS score, exploit, patch, remediation, redhat security, luci vulnerability, conga vulnerability","\u002Fwhat-is\u002Fcve-2010-3852",{"@context":131,"@type":132,"headline":126,"description":127,"datePublished":10,"dateModified":11,"author":133,"publisher":137,"about":141,"mainEntityOfPage":145,"articleSection":148,"keywords":149},"https:\u002F\u002Fschema.org","TechArticle",{"@type":134,"name":135,"url":136},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":134,"name":135,"url":136,"logo":138},{"@type":139,"url":140},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":142,"name":6,"description":143,"additionalType":144},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":146,"@id":147},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2010-3852","Cybersecurity","CVE-2010-3852, CVE-2010-3852 vulnerability, CVE-2010-3852 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[151],{"Operator":152,"Negate":15,"Nodes":153},"AND",[154,160],{"Operator":155,"Negate":15,"CPEMatch":156},"OR",[157],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":158,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":159},"E9CDDFBC-3FDF-4233-9A43-137F129FC922","0.22.4",{"Operator":155,"Negate":15,"CPEMatch":161},[162],{"Vulnerable":15,"Criteria":40,"MatchCriteriaID":163,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"AFDB782C-6A31-43A7-9A61-E94020AEE956",[],[],{"lastModified":11,"cacheTime":167,"version":21},1792366454493,{"score":169,"band":170,"action":171,"scoredAt":172},22,"Low","Monitor","2026-10-17T06:37:48.226437+00:00"]