Lucene search
CVE-2015-10004
Timing side-channel vulnerability in token validation method
Show more
| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
 | Timing Attack | 7 Jan 202320:33 | – | veracode |
 | Timing side-channel in github.com/robbert229/jwt | 14 Apr 202120:04 | – | osv |
| robbert229/jwt's token validation methods vulnerable to a timing side-channel during HMAC comparison | 28 Dec 202200:30 | – | osv |
 | Design/Logic Flaw | 27 Dec 202222:15 | – | prion |
 | CVE-2015-10004 Timing side-channel in github.com/robbert229/jwt | 27 Dec 202221:13 | – | cvelist |
 | CVE-2015-10004 | 27 Dec 202222:15 | – | nvd |
 | robbert229/jwt's token validation methods vulnerable to a timing side-channel during HMAC comparison | 28 Dec 202200:30 | – | github |
Node
[
{
"vendor": "github.com/robbert229/jwt",
"product": "github.com/robbert229/jwt",
"collectionURL": "https://pkg.go.dev",
"packageName": "github.com/robbert229/jwt",
"versions": [
{
"version": "0",
"lessThan": "0.0.0-20170426191122-ca1404ee6e83",
"status": "affected",
"versionType": "semver"
}
],
"programRoutines": [
{
"name": "Algorithm.validateSignature"
},
{
"name": "Algorithm.Validate"
}
],
"defaultStatus": "unaffected"
}
]Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo27 Dec 2022 22:15Current
7.4High risk
Vulners AI Score7.4
CVSS37.5
EPSS0.00114