Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
added 2023/01/13 6:30 a.m.48 views

Wildfly-elytron possibly vulnerable to timing attacks via use of unsafe comparator

wildfly-elytron: possible timing attacks via use of unsafe comparator. A flaw was found in Wildfly-elytron. Wildfly-elytron uses java.util.Arrays.equals in several places, which is unsafe and vulnerable to timing attacks. To compare values securely, use java.security.MessageDigest.isEqual instead...

7.4CVSS8.1AI score0.00584EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder