Lucene search
K

6 matches found

OSV
OSV
added 2023/01/18 12:30 a.m.26 views

GHSA-M4F8-P58G-J8MJ Observable timing discrepancy in JOpenId

A vulnerability, which was classified as problematic, was found in michaelliao jopenid. Affected is the function getAuthentication of the file JOpenId/src/org/expressme/openid/OpenIdManager.java. The manipulation leads to observable timing discrepancy. Upgrading to version 1.08 is able to address...

7.5CVSS4.2AI score0.00445EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2023/01/18 12:30 a.m.25 views

Observable timing discrepancy in JOpenId

A vulnerability, which was classified as problematic, was found in michaelliao jopenid. Affected is the function getAuthentication of the file JOpenId/src/org/expressme/openid/OpenIdManager.java. The manipulation leads to observable timing discrepancy. Upgrading to version 1.08 is able to address...

7.5CVSS3AI score0.00445EPSS
Exploits0References6Affected Software1
NVD
NVD
added 2023/01/18 12:15 a.m.12 views

CVE-2010-10006

A vulnerability, which was classified as problematic, was found in michaelliao jopenid. Affected is the function getAuthentication of the file JOpenId/src/org/expressme/openid/OpenIdManager.java. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high...

7.5CVSS4.9AI score0.00445EPSS
Exploits0References4
Prion
Prion
added 2023/01/18 12:15 a.m.15 views

Design/Logic Flaw

A vulnerability, which was classified as problematic, was found in michaelliao jopenid. Affected is the function getAuthentication of the file JOpenId/src/org/expressme/openid/OpenIdManager.java. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high...

5CVSS7.1AI score0.00445EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2023/01/17 11:58 p.m.58 views

CVE-2010-10006

CVE-2010-10006 affects michaelliao jopenid, specifically the timing discrepancy in OpenIdManager.java:getAuthentication. The issue arises from manipulation leading to observable timing differences. Exploitation complexity is described as high and exploitability as difficult. A fix is available in...

7.5CVSS5.6AI score0.00445EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2023/01/17 11:58 p.m.3 views

CVE-2010-10006 michaelliao jopenid OpenIdManager.java getAuthentication timing discrepancy

A vulnerability, which was classified as problematic, was found in michaelliao jopenid. Affected is the function getAuthentication of the file JOpenId/src/org/expressme/openid/OpenIdManager.java. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high...

2.6CVSS4.1AI score0.00445EPSS
Exploits0References4
Rows per page
Query Builder