Lucene search
+L

4 matches found

NVD
NVD
•added 2023/03/02 4:15 a.m.•60 views

CVE-2023-25806

OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization. There is an observable discrepancy in the authentication response time between calls where the user provided exists and calls where it does not. This issue only affects calls using the interna...

5.3CVSS5.4AI score0.00328EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/03/02 3:04 a.m.•43 views

CVE-2023-25806 Time discrepancy in authentication responses in OpenSearch

OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization. There is an observable discrepancy in the authentication response time between calls where the user provided exists and calls where it does not. This issue only affects calls using the interna...

5.3CVSS5.7AI score0.00328EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/03/02 3:04 a.m.•8 views

CVE-2023-25806 Time discrepancy in authentication responses in OpenSearch

OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization. There is an observable discrepancy in the authentication response time between calls where the user provided exists and calls where it does not. This issue only affects calls using the interna...

5.3CVSS7.4AI score0.00328EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/02 12:00 a.m.•1 views

CVE-2023-25806: Observable Timing Discrepancy

OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization. There is an observable discrepancy in the authentication response time between calls where the user provided exists and calls where it does not. This issue only affects calls using the interna...

5.3CVSS5.7AI score0.00328EPSS
SaveExploits0References3
Rows per page
Query Builder