Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/11 12:00 a.m.•1 views

CVE-2022-3143: Observable Discrepancy

wildfly-elytron: possible timing attacks via use of unsafe comparator. A flaw was found in Wildfly-elytron. Wildfly-elytron uses java.util.Arrays.equals in several places, which is unsafe and vulnerable to timing attacks. To compare values securely, use java.security.MessageDigest.isEqual instead...

7.4CVSS5.7AI score0.00584EPSS
SaveExploits0References3
Rows per page
Query Builder