Lucene search
Veracode Vulnerability DatabaseVERACODE:44946HistoryJan 04, 2024 - 9:41 a.m.
Timing Attack
2024-01-0409:41:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
github
cubefs
timing attack
password theft
software vulnerability
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
37.2%
github.com/cubefs/cubefs is vulnerability to Timing Attack. The vulnerability is due to raw string comparisons within the CubeFS master component. This allow an attacker to steal user passwords by observing the timing between password attempts.
Related
osv
osv
CubeFS timing attack can leak user passwords
2024-01-03 16:13:52
CVE-2023-46739
2024-01-03 17:15:10
CubeFS timing attack can leak user passwords in github.com/cubefs/cubefs
2024-06-28 15:28:53
github
github
CubeFS timing attack can leak user passwords
2024-01-03 16:13:52
nvd
nvd
CVE-2023-46739
2024-01-03 17:15:10
prion
prion
Design/Logic Flaw
2024-01-03 17:15:00
cve
cve
CVE-2023-46739
2024-01-03 17:15:10
cvelist
cvelist
CVE-2023-46739 Timing attack can leak user passwords
2024-01-03 16:15:58
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
37.2%
Related for VERACODE:44946