Lucene search

CVE-2024-42368

🗓️ 13 Aug 2024 20:08:15Reported by GitHub_MType

OpenTelemetry framework vulnerable to timing attack in bearertokenaut

Reporter	Title	Published	Views	Family All 13
Github Security Blog	open-telemetry has an Observable Timing Discrepancy	13 Aug 202418:59	–	github
OSV	CVE-2024-42368	13 Aug 202420:15	–	osv
OSV	open-telemetry has an Observable Timing Discrepancy in github.com/open-telemetry/opentelemetry-collector-contrib/extension/bearertokenauthextension	13 Aug 202423:22	–	osv
OSV	open-telemetry has an Observable Timing Discrepancy	13 Aug 202418:59	–	osv
OSV	CGA-j7x6-ff4w-c5gr	16 Aug 202414:04	–	osv
OSV	CGA-wmgc-r5q9-c5g3	25 Sep 202405:37	–	osv
NVD	CVE-2024-42368	13 Aug 202420:15	–	nvd
Veracode	Timing Attack	14 Aug 202405:13	–	veracode
Wolfi	CVE-2024-42368 vulnerabilities	21 Jan 202503:15	–	wolfi
RedhatCVE	CVE-2024-42368	15 Aug 202417:18	–	redhatcve

Vulners

Vulnrichment

Node

open-telemetry opentelemetry_collector_contribRange0.80.0–0.107.0

[
  {
    "vendor": "open-telemetry",
    "product": "opentelemetry-collector-contrib",
    "versions": [
      {
        "version": ">= 0.80.0, < 0.107.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/open-telemetry/opentelemetry-collector-contrib/pull/34516
github	www.github.com/open-telemetry/opentelemetry-collector-contrib/commit/c9bd3eff0bb357d9c812a0d8defd3b09db95699a
github	www.github.com/open-telemetry/opentelemetry-collector-contrib/security/advisories/GHSA-rfxf-mf63-cpqv

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Aug 2024 20:15Current

6.5Medium risk

Vulners AI Score6.5

CVSS36.5

EPSS0.0004

SSVC

CWE-208