Lucene search
Veracode Vulnerability DatabaseVERACODE:7855HistoryNov 20, 2018 - 5:53 a.m.
Timing Attack
2018-11-2005:53:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.002 Low
EPSS
Percentile
62.2%
github.com/pivotal-cf/on-demand-services-sdk is vulnerable to timing attack. This is due to an insecure method of verifying credentials which would allow remote attackers to make multiple authentication request to the server and discover valid credentials by analyzing the server response time and gain access to the application.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/pivotal-cf/on-demand-services-sdk | eq | HEAD | |
| github.com/pivotal-cf/on-demand-services-sdk | le | 0.23.0 |
Related
nvd
nvd
CVE-2018-15759
2018-11-19 14:29:00
cve
cve
CVE-2018-15759
2018-11-19 14:29:00
prion
prion
Design/Logic Flaw
2018-11-19 14:29:00
osv
osv
CVE-2018-15759
2018-11-19 14:29:00
cvelist
cvelist
CVE-2018-15759 On Demand Services SDK Timing Attack Vulnerability
2018-11-15 00:00:00