Apache CXF Timing Attack Information Disclosure Vulnerability

🗓️ 02 Mar 2017 00:00:00Reported by China National Vulnerability DatabaseType

Apache CXF has a timing attack flaw in Hawk and JOSE MAC authentication that may disclose data.

Reporter	Title	Published	Views	Family All 20
IBM Security Bulletins	Security Bulletin: Mulitiple security vulnerabilities in Apache CXF affects IBM InfoSphere Master Data Management (CVE-2016-6812 CVE-2016-8739 CVE-2017-5653 CVE-2017-5656 CVE-2017-3156)	16 Jun 201814:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to security vulnerabilities	27 May 202008:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to security vulnerability	19 Jul 201916:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Network Manager IP Edition is affected by an Apache CXF vulnerability (CVE-2017-3156)	17 Jun 201815:45	–	ibm
CVE	CVE-2017-3156	10 Aug 201718:00	–	cve
Cvelist	CVE-2017-3156	10 Aug 201718:00	–	cvelist
Fedora	[SECURITY] Fedora 25 Update: cxf-3.1.6-5.fc25	2 Mar 201701:22	–	fedora
Tenable Nessus	Fedora 25 : 1:cxf (2017-d62c8f91e4)	3 Mar 201700:00	–	nessus
Github Security Blog	Covert Timing Channel in Apache CXF	13 May 202201:09	–	github
NVD	CVE-2017-3156	10 Aug 201718:29	–	nvd