CVE-2024-0436

Theoretically, it would be possible for an attacker to brute-force the password for an instance in single-user password protection mode via a timing attack given the linear nature of the "!==" used for comparison. The risk is minified by the additional overhead of the request, which varies in a...

CVE-2024-0436: Observable Discrepancy

Theoretically, it would be possible for an attacker to brute-force the password for an instance in single-user password protection mode via a timing attack given the linear nature of the !== used for comparison. The risk is minified by the additional overhead of the request, which varies in a...

PT-2024-15560

Name of the Vulnerable Software and Affected Versions Software affected versions not specified Description The issue theoretically allows an attacker to brute-force the password for an instance in single-user password protection mode via a timing attack. This is due to the linear nature of the !=...