Vulners
Lucene search
2 matches found
Timing attack
Affecting versions did not compare tokens in constant time, which could make it possible for an attacker to guess the 2fa token of a user. This has been fixed by using using the crate constanttimeeq for comparison...
4.4CVSS4.8AI score0.00361EPSS
Exploits0Affected Software1
RUSTSEC-2022-0018 Timing attack
Affecting versions did not compare tokens in constant time, which could make it possible for an attacker to guess the 2fa token of a user. This has been fixed by using using the crate constanttimeeq for comparison...
4.2CVSS4.3AI score0.00361EPSS
Exploits0References3
20