Lucene search
K

4 matches found

Tenable Nessus
Tenable Nessus
added 2020/05/07 12:0 a.m.22 views

FreeBSD : Wagtail -- potential timing attack vulnerability (d5fead4f-8efa-11ea-a5c8-08002728f74c)

Wagtail release notes : CVE-2020-11037: Potential timing attack on password-protected private pages This release addresses a potential timing attack on pages or documents that have been protected with a shared password through Wagtail's 'Privacy' controls. This password check is performed through...

6.1CVSS5.2AI score0.00052EPSS
Exploits0References4
FreeBSD
FreeBSD
added 2020/05/04 12:0 a.m.24 views

Wagtail -- potential timing attack vulnerability

Wagtail release notes: CVE-2020-11037: Potential timing attack on password-protected private pages This release addresses a potential timing attack on pages or documents that have been protected with a shared password through Wagtail's "Privacy" controls. This password check is performed through ...

6.1CVSS1.4AI score0.00052EPSS
Exploits0References2
OSV
OSV
added 2020/04/30 11:15 p.m.10 views

CVE-2020-11037

In Wagtail before versions 2.7.3 and 2.8.2, a potential timing attack exists on pages or documents that have been protected with a shared password through Wagtail's "Privacy" controls. This password check is performed through a character-by-character string comparison, and so an attacker who is...

4.7CVSS5.5AI score
Exploits0References5
myhack58
myhack58
added 2013/05/21 12:0 a.m.15 views

php character comparison Double equal characteristics may be references made to the security-vulnerability warning-the black bar safety net

Title party!, the The article is relatively short, ha ha! Before learning php, research. php auto similar conversion,this is php a feature, not a 0day,phper know something, There are similar perl. Straight cut body, we learn php know that“==”with”===”the difference,the former in the comparison of...

0.4AI score
Exploits0
Rows per page
Query Builder