Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2023/10/10 9:29 p.m.37 views

Harbor timing attack risk

In the Harbor jobservice container, the comparison of secrets in the authenticator type is prone to timing attacks. The vulnerability occurs due to the following code: https://github.com/goharbor/harbor/blob/aaea068cceb4063ab89313d9785f2b40f35b0d63/src/jobservice/api/authenticator.goL69-L69 To...

6.5CVSS6.3AI score0.00373EPSS
SaveExploits1References7Affected Software1
OSV
OSV
added 2023/10/10 9:29 p.m.92 views

GHSA-MQ6F-5XH5-HGCF Harbor timing attack risk

In the Harbor jobservice container, the comparison of secrets in the authenticator type is prone to timing attacks. The vulnerability occurs due to the following code: https://github.com/goharbor/harbor/blob/aaea068cceb4063ab89313d9785f2b40f35b0d63/src/jobservice/api/authenticator.goL69-L69 To...

5.9CVSS6AI score0.00373EPSS
SaveExploits1References7
Rows per page
Query Builder