CWE-203: Observable Discrepancy
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.
Also known as Side Channel Attack.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- cubefsTiming attack can leak user passwords6.5 Medium
- silabs.com gsdk, silabs gecko software development kit +1 morePotential Timing vulnerability in CBC PKCS7 padding calculations4.6 Medium
- mozilla firefoxMultiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This...4.3 Medium
- php, fedoraproject fedora +1 morePHP is vulnerable to the Marvin Attack5.9 Medium
- gallagher command centre, command centre server +1 moreAn observable response discrepancy in the Gallagher Command Centre RESTAPI allows an...4.3 Medium
- yiiframework yii2-authclientyii2-authclient vulnerable to possible timing attack on string comparison in OAuth1, OAuth2 and OpenID Connect implementation6.1 Medium
- cryptopp crypto\+\+Crypto++ (aka cryptopp) through 8.9.0 has a Marvin side channel during decryption with PKCS#1 v1...5.9 Medium
- couchbase server, cryptography.io cryptography, red hat ansible automation platform 2 +8 more +10 morePython-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-256597.5 High
- go standard library crypto/tls, golang go +1 moreBefore Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel7.5 High
- google androidIn BTM_BleVerifySignature of btm_ble.cc, there is a possible way to bypass signature validation...6.5 Medium
- rustcrypto rsaRustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannels5.9 Medium
- gnu gnutls, debian linux, fedoraproject fedora +12 more +14 moreGnutls: timing side-channel in the rsa-psk authentication5.9 Medium
- urbackup serverUrBackup Server 2.5.31 allows brute-force enumeration of user accounts because a failure message...5.3 Medium
- google androidIn Package Manager Service, there is a possible way to determine whether an app is installed,...5.5 Medium
- google androidIn Media Projection, there is a possible way to determine whether an app is installed, without...5.5 Medium
- google androidIn Package Manager, there is a possible way to determine whether an app is installed, without...3.3 Low
- google androidIn Window Manager, there is a possible way to determine whether an app is installed, without...3.3 Low
- google androidIn the Device Idle Controller, there is a possible way to determine whether an app is installed,...3.3 Low
- google androidIn Game Manager Service, there is a possible way to determine whether an app is installed,...3.3 Low
- google androidIn Job Scheduler, there is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn Input Method, there is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn InputMethod, there is a possible way to determine whether an app is installed, without query...7.8 High
- google androidIn Input Method, there is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn Settings, there is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn Text Services, there is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn Text Services, there is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn InputMethod, there is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn Overlay Manager, there is a possible way to determine whether an app is installed, without...5.5 Medium
- google androidIn Permission Manager, there is a possible way to determine whether an app is installed, without...5.5 Medium
- google androidIn Package Manager Service, there is a possible way to determine whether an app is installed,...5.5 Medium
- google androidIn Settings, there is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn Package Installer, there is a possible way to determine whether an app is installed, without...7.8 High
- google androidIn Activity Manager, there is a possible way to determine whether an app is installed, without...5.5 Medium
- google androidIn Device Policy, there is a possible way to verify if a particular admin app is registered on...5.5 Medium
- google androidIn UsageStatsService, there is a possible way to read installed 3rd party apps due to side...5.5 Medium
- google androidIn Content, there is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn ContentService, there is a possible way to determine whether an app is installed, without...5.5 Medium
- google androidIn Content, there is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn ContentService, there is a possible way to read installed sync content providers due to side...5.5 Medium
- google androidIn Content, there is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn Content Service, there is a possible way to determine whether an app is installed, without...5.5 Medium
- google androidIn Content, here is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn Package Manager, there is a possible way to determine whether an app is installed, without...5.5 Medium
- google androidIn ActivityManagerService, there is a possible way to determine whether an app is installed,...5.5 Medium
- google androidIn PackageManager, there is a possible way to determine whether an app is installed, without...5.5 Medium
- google androidIn Package Manager, there is a possible way to determine whether an app is installed, without...5.5 Medium
- google androidIn Slice, there is a possible disclosure of installed applications due to side channel...7.8 High
- google androidIn Permission, there is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn PackageManagerNative, there is a possible way to determine whether an app is installed,...5.5 Medium
- google androidIn Usage Stats Service, there is a possible way to determine whether an app is installed, without...5.5 Medium
- Show moreLoading…