CVE-2017-9735: Observable Discrepancy

Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before rejection of incorrect passwords...

PT-2017-19144

Name of the Vulnerable Software and Affected Versions Jetty versions prior to 9.4.x Description The issue is related to a timing channel in util/security/Password.java, which allows remote attackers to obtain access by observing elapsed times before rejection of incorrect passwords. This makes it...