Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
•added 2023/01/18 12:30 a.m.•36 views

Observable timing discrepancy in JOpenId

A vulnerability, which was classified as problematic, was found in michaelliao jopenid. Affected is the function getAuthentication of the file JOpenId/src/org/expressme/openid/OpenIdManager.java. The manipulation leads to observable timing discrepancy. Upgrading to version 1.08 is able to address...

7.5CVSS3AI score0.00887EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2023/01/18 12:30 a.m.•72 views

GHSA-M4F8-P58G-J8MJ Observable timing discrepancy in JOpenId

A vulnerability, which was classified as problematic, was found in michaelliao jopenid. Affected is the function getAuthentication of the file JOpenId/src/org/expressme/openid/OpenIdManager.java. The manipulation leads to observable timing discrepancy. Upgrading to version 1.08 is able to address...

7.5CVSS4.2AI score0.00887EPSS
SaveExploits0References5
NVD
NVD
•added 2023/01/18 12:15 a.m.•31 views

CVE-2010-10006

A vulnerability, which was classified as problematic, was found in michaelliao jopenid. Affected is the function getAuthentication of the file JOpenId/src/org/expressme/openid/OpenIdManager.java. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high...

7.5CVSS4.9AI score0.00887EPSS
SaveExploits0References4
Prion
Prion
•added 2023/01/18 12:15 a.m.•27 views

Design/Logic Flaw

A vulnerability, which was classified as problematic, was found in michaelliao jopenid. Affected is the function getAuthentication of the file JOpenId/src/org/expressme/openid/OpenIdManager.java. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high...

5CVSS7.1AI score0.00887EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2023/01/17 11:58 p.m.•3 views

CVE-2010-10006 michaelliao jopenid OpenIdManager.java getAuthentication timing discrepancy

A vulnerability, which was classified as problematic, was found in michaelliao jopenid. Affected is the function getAuthentication of the file JOpenId/src/org/expressme/openid/OpenIdManager.java. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high...

2.6CVSS4.1AI score0.00887EPSS
SaveExploits0References4
CVE
CVE
•added 2023/01/17 11:58 p.m.•77 views

CVE-2010-10006

CVE-2010-10006 affects michaelliao jopenid, specifically the timing discrepancy in OpenIdManager.java:getAuthentication. The issue arises from manipulation leading to observable timing differences. Exploitation complexity is described as high and exploitability as difficult. A fix is available in...

7.5CVSS5.6AI score0.00887EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/17 12:00 a.m.•1 views

CVE-2010-10006: Observable Timing Discrepancy

A vulnerability, which was classified as problematic, was found in michaelliao jopenid. Affected is the function getAuthentication of the file JOpenId/src/org/expressme/openid/OpenIdManager.java. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high...

7.5CVSS4.9AI score0.00887EPSS
SaveExploits0References5
Rows per page
Query Builder