CWE-203: Observable Discrepancy
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.
Also known as Side Channel Attack.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- humhub social network kitHumHub Social Network Kit Enterprise v1.3.13 allows remote attackers to find the user accounts...5.3 Medium
- pterodactyl panelPterodactyl vulnerable to 2FA Sniffing7.5 High
- oracle corporation java, oracle jdk, jre +2 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported...3.1 Low
- control-webpanel webpanelIn CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, the Login process allows attackers...5.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIf hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous...8.1 High
- torproject tor browserTor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to...4.3 Medium
- computrols building automation softwareComputrols CBAS 18.0.0 allows Username Enumeration.5.3 Medium
- gitlabAn Information Exposure issue (issue 2 of 2) was discovered in GitLab Community and Enterprise...7.5 High
- citrix sharefileCitrix ShareFile through 19.1 allows User Enumeration. It is possible to enumerate application...7.5 High
- dhcpcd project dhcpcdauth.c in dhcpcd before 7.2.1 allowed attackers to infer secrets by performing latency attacks.5.9 Medium
- w1.fi hostapd, wi-fi alliance hostapd with sae support, fedoraproject fedora +7 more +9 moreThe implementations of SAE in hostapd and wpa_supplicant are vulnerable to side-channel attacks5.9 Medium
- w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, debian linux +8 more +10 moreThe implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns3.7 Low
- big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager +12 more +14 moreIn BIG-IP 11.5.1-11.5.8 and 11.6.1-11.6.3, the Configuration Utility login page may not follow...7.5 High
- glpi-project glpiTeclib GLPI before 9.4.1.1 is affected by a timing attack associated with a cookie.8.1 High
- openssl, canonical ubuntu linux, debian linux +79 more +81 more0-byte record padding oracle5.9 Medium
- google chromeInappropriate implementation in JavaScript in Google Chrome prior to 72.0.3626.81 allowed a...5.3 Medium
- vestacp vesta control panelVesta CP version Prior to commit f6f6f9cfbbf2979e301956d1c6ab5c44386822c0 -- any release prior to...9.8 Critical
- [unknown] nettleA Bleichenbacher type side-channel based padding oracle attack was found in the way nettle...4.7 Medium
- [unknown] gnutlsA Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls...4.7 Medium
- canonical ubuntu linux, debian linux, nodejs node.js +17 more +19 moreSimultaneous Multi-threading (SMT) in processors can enable local users to exploit software...4.7 Medium
- broadcom ca identity suite virtual appliance, ca technologies identity governance, broadcom ca identity governance +2 moreCA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual...5.3 Medium
- fortinet fortiosA plaintext recovery of encrypted messages or a Man-in-the-middle (MiTM) attack on RSA PKCS #1 v1...5.9 Medium
- fortinet fortiosA plaintext recovery of encrypted messages or a Man-in-the-middle (MiTM) attack on RSA PKCS #1 v1...5.9 Medium
- intel core i3, core i5, core i7 +6 more +8 moreSystems with microprocessors utilizing speculative execution and address translations may allow...5.6 Medium
- intel core i3, core i5, core i7 +28 more +30 moreSystems with microprocessors utilizing speculative execution and Intel software guard extensions ...6.4 Medium
- samba, canonical ubuntu linux, debian linux +2 moreThe Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because...4.3 Medium
- gnupg libgcrypt, canonical ubuntu linux, debian linux +8 more +10 moreLibgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA...4.7 Medium
- arm cortex-a, intel atom c, atom e +197 more +199 moreSystems with microprocessors utilizing speculative execution and that perform speculative reads...5.6 Medium
- debian linux, arm cortex-a, canonical ubuntu linux +280 more +282 morelinux-4.9 - security update5.5 Medium
- broadcom symantec intelligencecenter, symantec corporation intelligencecenter +1 moreSymantec IntelligenceCenter 3.3 is vulnerable to the Return of the Bleichenbacher Oracle Threat ...5.9 Medium
- symantec corporation ssl visibility (sslv), broadcom ssl visibility appliance +1 moreSymantec SSL Visibility (SSLV) 3.8.4FC, 3.10 prior to 3.10.4.1, 3.11, and 3.12 prior to 3.12.2.1...5.9 Medium
- synacor zimbra collaboration suitemailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 allows...5.3 Medium
- sinatrarb rack-protectionrack-protection gem timing attack vulnerability when validating CSRF token5.9 Medium
- cisco mobility services engineA vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an...5.3 Medium
- arm cortex-a12 firmware, cortex-a15 firmware, cortex-a17 firmware +306 more +308 moreCVE-2017-5753 does not affect BellSoft software5.6 Medium
- arm cortex-a, canonical ubuntu linux, debian linux +218 more +220 moreImportant: kernel security, bug fix, and enhancement update5.6 Medium
- cisco adaptive security appliance 5505 firmware, adaptive security appliance 5510 firmware, adaptive security appliance 5520 firmware +2 more +4 moreA vulnerability in the TLS protocol implementation of legacy Cisco ASA 5500 Series (ASA 5505,...5.9 Medium
- radware alteon firmwareRadware Alteon devices with a firmware version between 31.0.0.0-31.0.3.0 are vulnerable to an...5.9 Medium
- wolfssl, arubanetworks instant, siemens scalance w1750d firmware +2 morewolfSSL Bleichenbacher/ROBOT7.5 High
- legion of the bouncy castle bouncycastle tls, bouncycastle bc-java +1 moreBouncyCastle JCE TLS Bleichenbacher/ROBOT7.5 High
- debian linux, erlang erlang\/otp +1 moreThe Erlang otp TLS server answers with different TLS alerts to different error types in the RSA...5.9 Medium
- f5 big-ip afm, big-ip analytics, big-ip apm +6 more +8 moreOn BIG-IP versions 11.6.0-11.6.2 (fixed in 11.6.2 HF1), 12.0.0-12.1.2 HF1 (fixed in 12.1.2 HF2),...7.4 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and...5.3 Medium
- apple safari, tvos, webkit +1 more +3 moreAn issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before...5.3 Medium
- eclipse jetty, debian linux, oracle communications cloud native core policy +4 more +6 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 High
- watchguard firewareWatchGuard Fireware allows user enumeration, e.g., in the Firebox XML-RPC login handler. A login...5.3 Medium
- revive-adserver revive adserverRevive Adserver before 3.2.3 suffers from Information Exposure Through Discrepancy. It is...5.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreObservable Discrepancy in Apache Tomcat5.9 Medium
- nettle project nettle, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 moreThe RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys...7.5 High
- openssl, canonical ubuntu linux, debian linux +3 more +5 moreThe dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly...5.5 Medium
- Show moreLoading…