2 matches found
Timing attack
Affecting versions did not compare tokens in constant time, which could make it possible for an attacker to guess the 2fa token of a user. This has been fixed by using using the crate constanttimeeq for comparison...
4.4CVSS4.8AI score0.0083EPSS
SaveExploits0Affected Software1
RUSTSEC-2022-0018 Timing attack
Affecting versions did not compare tokens in constant time, which could make it possible for an attacker to guess the 2fa token of a user. This has been fixed by using using the crate constanttimeeq for comparison...
4.2CVSS4.3AI score0.0083EPSS
SaveExploits0References3
20