Repository navigation
Timing Attack Via Comparison Function in srcclr/example-java-maven (master) #57
Description
Timing Attack Via Comparison Function in srcclr/example-java-maven (master)
Issue Details
- Vulnerability: Timing Attack Via Comparison Function
- Severity: Medium
- Project: srcclr/example-java-maven
- Branch: master
- Scan Date: Oct 30, 2018 12:43:09
Issue Description
orientdb-core is vulnerable to timing attacks. The vulnerablitliy is due to the use of a regular string comparison funciton to compare the user-supplied and expected passwords.
Activity