Timing Attack

2024-02-0805:44:32

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

pulsar

broker

authentication

timing attack

vulnerability

software

bypass

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

34.6%

JSON

pulsar-broker-auth-sasl is vulnerable to a Timing Attack. The vulnerability is due to the verifyAndExtract function within SaslRoleTokenSigner.java because it take different amounts of time to return false depending on how many characters it needs to compare before finding a mismatch. This variability allows an attacker to deduce the correct signature by measuring these time differences, resulting in SASL authentication bypass.