Описание
The aaugustin websockets library before 9.1 for Python has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...). An attacker may be able to guess a password via a timing attack.
Ссылки
- PatchThird Party Advisory
- PatchThird Party Advisory
- PatchThird Party Advisory
- PatchThird Party Advisory
- PatchThird Party Advisory
- PatchThird Party Advisory
Уязвимые конфигурации
Одно из
EPSS
5.9 Medium
CVSS3
2.6 Low
CVSS2
Дефекты
Связанные уязвимости
The aaugustin websockets library before 9.1 for Python has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...). An attacker may be able to guess a password via a timing attack.
The aaugustin websockets library before 9.1 for Python has an Observab ...
Observable Timing Discrepancy in aaugustin websockets library
Уязвимость библиотеки aaugustin протокола связи websockets языка программирования Python, связанная с утечкой информации на основании временных расхождений, позволяющая нарушителю получить доступ к конфиденциальным данным
EPSS
5.9 Medium
CVSS3
2.6 Low
CVSS2