CWE-203: Observable Discrepancy
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.
Also known as Side Channel Attack.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- dalmark systeam enterprise resource planningDalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User enumeration. The Systeam...5.3 Medium
- dalmark systeam enterprise resource planningDalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User enumeration. The Systeam...5.3 Medium
- cybelesoft thinfinity virtualuiThinfinity VirtualUI before 3.0 allows a malicious actor to enumerate users registered in the OS ...5.3 Medium
- sourcegraphSide-channel attack in Sourcegraph6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in cache in Google Chrome prior to 96.0.4664.45 allowed a remote...6.5 Medium
- cybelesoft thinfinity virtualuiIn Cibele Thinfinity VirtualUI before 3.0, /changePassword returns different responses for...5.3 Medium
- google androidIn getMimeGroup of PackageManagerService.java, there is a possible way to determine whether an...3.3 Low
- google androidIn cancelNotificationsFromListener of NotificationManagerService.java, there is a possible way to...3.3 Low
- google androidIn setNotificationsShownFromListener of NotificationManagerService.java, there is a possible way...5.5 Medium
- google androidIn startRanging of RttServiceImpl.java, there is a possible way to determine whether an app is...5.5 Medium
- google androidIn adjustStreamVolume of AudioService.java, there is a possible way to determine whether an app...3.3 Low
- google androidIn getMeidForSlot of PhoneInterfaceManager.java, there is a possible way to determine whether an...3.3 Low
- google androidIn getNetworkTypeForSubscriber of PhoneInterfaceManager.java, there is a possible way to...5.5 Medium
- google androidIn checkExistsAndEnforceCannotModifyImmutablyRestrictedPermission of PermissionManagerService...5.5 Medium
- google androidIn onResume of NotificationAccessDetails.java, there is a possible way to determine whether an...5.5 Medium
- google androidIn setApplicationCategoryHint of PackageManagerService.java, there is a possible way to determine...5.5 Medium
- google androidIn getDeviceIdWithFeature of PhoneInterfaceManager.java, there is a possible way to determine...5.5 Medium
- google androidIn registerSuggestionConnectionStatusListener of WifiServiceImpl.java, there is a possible way to...3.3 Low
- google androidIn getDeviceId of PhoneSubInfoController.java, there is a possible way to determine whether an...3.3 Low
- google androidIn hasManageOngoingCallsPermission of TelecomServiceImpl.java, there is a possible way to...3.3 Low
- google androidIn getLaunchedFromUid and getLaunchedFromPackage of ActivityClientController.java, there is a...3.3 Low
- google androidIn getNeighboringCellInfo of PhoneInterfaceManager.java, there is a possible way to determine...3.3 Low
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +315 more +317 moreInformation disclosure through timing and power side-channels during mod exponentiation for RSA...9.0 Critical
- cryptopp crypto\+\+Crypto++ (aka Cryptopp) 8.6.0 and earlier contains a timing leakage in MakePublicKey(). There is...5.3 Medium
- mb connect line mbconnect24, mymbconnect24 +1 moreRemote user enumeration in mymbCONNECT24, mbCONNECT24 <= 2.9.07.5 High
- inhand networks ir615 router, inhandnetworks ir615 firmware +1 moreInHand Networks IR615 Router6.5 Medium
- bestpractical request tracker, debian linux, fedoraproject fedora +2 moreBest Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2...7.5 High
- amd all supported processors, athlon firmware, athlon pro firmware +3 more +5 moreSide-channels Related to the x86 PREFETCH Instruction4.7 Medium
- ays pro poll makerPoll Maker < 3.4.2 - Unauthenticated Time Based SQL Injection7.5 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54...4.3 Medium
- ibm sterling file gateway, sterling b2b integrator +1 moreIBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to...4.3 Medium
- apache kafka, oracle communications brm - elastic charging engine, communications cloud native core policy +5 more +7 moreTiming Attack Vulnerability for Apache Kafka Connect and Clients5.9 Medium
- kaden picoflux air, kadenvodomery picoflux air firmware +1 moreObservable discrepancy in Kaden PICOFLUX AiR leaks water consumption4.3 Medium
- openbsd openssh, netapp clustered data ontap, hci management node +2 more +4 moreOpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of...5.3 Medium
- pimcoreObservable Response Discrepancy in Lost Password Service5.3 Medium
- cyberark identityCyberArk Identity 21.5.131, when handling an invalid authentication attempt, sometimes reveals...5.3 Medium
- nvidia jetson agx xavier series, jetson xavier nx, jetson tx2 series, jetson tx2 nx, jetson nano, jetson nano 2gb, jetson tx1., jetson linux +1 moreNVIDIA camera firmware contains a multistep, timing-related vulnerability where an unauthorized...7.2 High
- nuvoton npct75x firmwareAn attacker with physical access to Nuvoton Trusted Platform Module (NPCT75x 7.2.x before 7.2.2.0...3.8 Low
- linux kernelnet/netfilter/nf_conntrack_standalone.c in the Linux kernel before 5.12.2 allows observation of...3.3 Low
- redhat wildfly elytron, quarkus, redhat build of quarkus +11 more +13 moreObservable Discrepancy in Wildfly Elytron5.3 Medium
- pengutronix bareboxcommon/password.c in Pengutronix barebox through 2021.07.0 leaks timing information because...7.5 High
- mb connect line mbconnect24, mymbconnect24 +1 moreInformation Exposure in mymbCONNECT24, mbCONNECT24 <= 2.8.07.5 High
- debian linux, linux kernel, fedoraproject fedora +2 moreIn the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information...5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreIn the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information...5.5 Medium
- tecnick tcexamAn exposure of sensitive information vulnerability exists in TCExam <= 14.8.1. If a password...5.3 Medium
- meow hash project hashMeow hash 0.5/calico does not sufficiently thwart key recovery by an attacker who can query...5.3 Medium
- arm mbed tls, debian linux +1 moreAn issue was discovered in Arm Mbed TLS before 2.24.0. An attacker can recover a private key (for...4.7 Medium
- arm mbed tls, debian linux +1 moreAn issue was discovered in Arm Mbed TLS before 2.23.0. A side channel allows recovery of an ECC...5.3 Medium
- arm mbed tls, debian linux +1 moreAn issue was discovered in Arm Mbed TLS before 2.23.0. Because of a side channel in modular...5.3 Medium
- apache teaclave sgx sdkIn Rust SGX 1.1.3, a side-channel vulnerability in base64 PEM file decoding allows system-level ...4.9 Medium
- Show moreLoading…