CWE-208: Observable Timing Discrepancy
Two separate operations in a product require different amounts of time to complete, in a way that is observable to an actor and reveals security-relevant information about the state of the product, such as whether a particular operation was successful or not.
A kind of CWE-203 Observable Discrepancy.
From the CWE List. © The MITRE Corporation.
Newest
- drupal token content accessToken Content Access - Moderately critical - Access bypass - SA-CONTRIB-2026-0907.5 High
- bouncycastle bc-javaML-KEM (Kyber) decapsulation leaks private key information through non-constant-time division in message decoding and ciphertext compression (KyberSlash)8.2 High
- progress telerik ui for asp.net ajaxRadAsyncUpload Upload Metadata Timing Oracle Vulnerability in Telerik UI for ASP.NET AJAX7.5 High
- google tink-android, tink-java, tink java +2 moreObservable Timing Discrepancy in Tink-Java and Tink-Android ChunkedMacVerification8.2 High
- drsteve crypt::passwordCrypt::Password versions through 0.28 for Perl are susceptible to timing attacks7.5 High
- jberger mojo::jwtMojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison5.3 Medium
- hcl software bigfix platform, hclsoftware hcl bigfix platform +1 moreHCL BigFix Platform is affected by a user enumeration vulnerability3.1 Low
- phalcon cphalconPhalcon: Non-constant-time HMAC verification in `Encryption\Crypt::decrypt` (timing side-channel)8.2 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Account enumeration via observable login timing discrepancy5.3 Medium
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: non-constant-time comparison in pbkdf2-sha256 password verification3.7 Low
- trustedfirmware op-tee, op-tee optee os +1 moreOP-TEE: Hisilicon HPRE PKCS#1 v1.5 Decryption Padding Oracle2.5 Low
- trustedfirmware op-tee, op-tee optee os +1 moreOP-TEE: RSA-OAEP padding oracle in NXP CAAM driver enables plaintext recovery2.5 Low
- trustedfirmware op-tee, op-tee optee os +1 moreOP-TEE: RSA-OAEP padding oracle in Hisilicon HPRE driver enables plaintext recovery2.5 Low
- pay-rails paypay-rails/pay: non-constant-time HMAC comparison in Paddle Billing webhook signature verifier7.4 High
- coollabsio coolifyCoolify: Timing Attack in GitLab Webhook Token Validation4.8 Medium
- mik cryptxCryptX versions before 0.088_001 for Perl compare AEAD authentication tags in non-constant time in the streaming decrypt_done path3.7 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ 3000 series desktop processors +14 more +16 moreAn observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute...5.6 Medium
- amd ryzen™ 3000 series desktop processors, ryzen™ 5000 series desktop processors, ryzen™ threadripper™ 3000 series processors +2 more +4 moreAn observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute...1.8 Low
- wolfsslBleichenbacher padding oracle in PKCS#7 KTRI RSA PKCS#1 v1.5 decryption6.0 Medium
- filamentphp filamentFilament: Timing-based user enumeration on login page5.3 Medium
web-token/jwt-libraryPackagistPHP JWT Library: RSA1_5 (RSAES-PKCS1-v1_5) decryption lacks implicit rejection, exposing a Bleichenbacher/Marvin padding oracle6.3 Medium- linux-pamLinux-PAM pam_userdb Observable Timing Discrepancy in Plaintext Password Comparison6.9 Medium
- arodland crypt::pbkdf2Crypt::PBKDF2 versions before 0.261630 for Perl are vulnerable to timing attacks5.9 Medium
- erlang otp, erlang\/otp, erlang\/ssh +2 moreSSH server timing side-channel in ssh_auth:check_password/3 allows unauthenticated username enumeration6.3 Medium
- nocodbNocoDB: User Enumeration via Sign-In Timing6.3 Medium
- shopwareShopware: Timing-attack on admin panel allowing enumeration of administrator usernames3.7 Low
- mauriceboe trekTime-based user enumeration in TREK authentication endpoint5.3 Medium
- jjnapiork catalyst::plugin::authenticationCatalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks5.1 Medium
- netatalkDES-ECB auth with timing side channel5.9 Medium
- rrwo crypt::saltedhashCrypt::SaltedHash versions through 0.09 for Perl is susceptible to timing attacks7.5 High
- memcachedIn memcached before 1.6.42, password data for SASL password database authentication has a timing...8.1 High
- memcached, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreIn memcached before 1.6.42, username data for SASL password database authentication has a timing...8.1 High
- apache tomcatApache Tomcat: AJP secret compared in non-constant time3.7 Low
- inducer relateRELATE: Timing Attack Vulnerability in course/auth.py — check_sign_in_key()9.0 Critical
- linux, linux kernel +1 morenet/tcp-md5: Fix MAC comparison to be constant-time9.4 Critical
mcp-ssh-toolnpmmcp-ssh-tool has file transfer path policy bypass and bearer token comparison hardening8.7 Highkanidmcrates.ioKanidm has non-constant-time comparison of OAuth2 client_secret3.7 Lowgithub.com/getaxonflow/axonflowGoAxonflow fixed bugs by implementing multi-tenant isolation and access-control hardening9.1 Critical- svvqt pyquorumPyQuorum: Timing side‑channel in mul_mod6.9 Medium
- open-telemetry opentelemetry-collector-contrib, opentelemetry collector contrib +1 moreazureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay8.1 High
- apache http serverApache HTTP Server: mod_auth_digest timing attack4.8 Medium
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +14 more +16 moreGnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal3.7 Low
- spring boot, vmware spring boot +1 moreSpring Boot DevTools remote secret comparison is vulnerable to timing attacks7.5 High
- traefikTraefik: BasicAuth middleware: timing side-channel vulnerability6.3 Medium
- rargames 4gaboards4ga Boards: User Enumeration via Timing Side-Channel in Authentication Endpoint5.3 Medium
- spring security, vmware spring security +1 moreUser Attribute Enumeration when Using DaoAuthenticationProvider3.7 Low
- kimaiKimai before 2.54.0 Username Enumeration via Timing Oracle6.3 Medium
- notamitgamer mojicMojic: Observable Timing Discrepancy in HMAC Verification4.7 Medium
- apostrophecms apostrophe, apostrophecms +1 moreApostropheCMS: User Enumeration via Timing Side Channel in Password Reset Endpoint3.7 Low
- devolutions serverUsername Enumeration via Timing Attack6.9 Medium
- Show moreLoading…