1 matches found
CVE-2022-3143: Observable Discrepancy
wildfly-elytron: possible timing attacks via use of unsafe comparator. A flaw was found in Wildfly-elytron. Wildfly-elytron uses java.util.Arrays.equals in several places, which is unsafe and vulnerable to timing attacks. To compare values securely, use java.security.MessageDigest.isEqual instead...
7.4CVSS5.7AI score0.00584EPSS
SaveExploits0References3
20