Timing Attack

Spring Security is vulnerable to a timing attack. The vulnerability is due to the use of String.equals, which returns early when a character differs, causing response times to vary based on the number of matching leading characters and allowing an attacker to perform timing analysis to...