Описание
Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat OpenShift Enterprise 2 | nodejs010-nodejs-cookie-signature | Will not fix | ||
| Red Hat OpenShift Enterprise 3 | nodejs-cookie-signature | Not affected |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-385
https://bugzilla.redhat.com/show_bug.cgi?id=1371409nodejs-cookie-signature: Timing attack vulnerability
EPSS
Процентиль: 67%
0.00539
Низкий
5.4 Medium
CVSS3
3.5 Low
CVSS2
Связанные уязвимости
CVSS3: 4.4
ubuntu
около 6 лет назад
Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used.
CVSS3: 4.4
nvd
около 6 лет назад
Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used.
CVSS3: 4.4
debian
около 6 лет назад
Node-cookie-signature before 1.0.6 is affected by a timing attack due ...
EPSS
Процентиль: 67%
0.00539
Низкий
5.4 Medium
CVSS3
3.5 Low
CVSS2