Lucene search
+L

1 matches found

OSV
OSV
added 2023/10/10 9:29 p.m.97 views

GHSA-MQ6F-5XH5-HGCF Harbor timing attack risk

In the Harbor jobservice container, the comparison of secrets in the authenticator type is prone to timing attacks. The vulnerability occurs due to the following code: https://github.com/goharbor/harbor/blob/aaea068cceb4063ab89313d9785f2b40f35b0d63/src/jobservice/api/authenticator.goL69-L69 To...

5.9CVSS6AI score0.00373EPSS
SaveExploits1References7
Rows per page
Query Builder