Security Advisory
CVE-2010-0009
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1) hashes or (2) passwords.