Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9hcm-hr65-2825

Опубликовано: 29 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

mudler/localai version 2.17.1 is vulnerable to a Timing Attack. This type of side-channel attack allows an attacker to compromise the cryptosystem by analyzing the time taken to execute cryptographic algorithms. Specifically, in the context of password handling, an attacker can determine valid login credentials based on the server's response time, potentially leading to unauthorized access.

mudler/localai version 2.17.1 is vulnerable to a Timing Attack. This type of side-channel attack allows an attacker to compromise the cryptosystem by analyzing the time taken to execute cryptographic algorithms. Specifically, in the context of password handling, an attacker can determine valid login credentials based on the server's response time, potentially leading to unauthorized access.

EPSS

Процентиль: 41%
0.00194
Низкий

7.5 High

CVSS3

Дефекты

CWE-200
CWE-203
CWE-208

Связанные уязвимости

CVSS3: 5.9
nvd
больше 1 года назад

mudler/localai version 2.17.1 is vulnerable to a Timing Attack. This type of side-channel attack allows an attacker to compromise the cryptosystem by analyzing the time taken to execute cryptographic algorithms. Specifically, in the context of password handling, an attacker can determine valid login credentials based on the server's response time, potentially leading to unauthorized access.

EPSS

Процентиль: 41%
0.00194
Низкий

7.5 High

CVSS3

Дефекты

CWE-200
CWE-203
CWE-208