Логотип exploitDog
bind:CVE-2023-37482
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-37482

Количество 2

Количество 2

nvd логотип

CVE-2023-37482

12 месяцев назад

The login functionality of the web server in affected devices does not normalize the response times of login attempts. An unauthenticated remote attacker could exploit this side-channel information to distinguish between valid and invalid usernames.

CVSS3: 5.3
EPSS: Низкий
github логотип

GHSA-p6r5-883m-2c48

12 месяцев назад

The login functionality of the web server in affected devices does not normalize the response times of login attempts. An unauthenticated remote attacker could exploit this side-channel information to distinguish between valid and invalid usernames.

CVSS3: 5.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-37482

The login functionality of the web server in affected devices does not normalize the response times of login attempts. An unauthenticated remote attacker could exploit this side-channel information to distinguish between valid and invalid usernames.

CVSS3: 5.3
0%
Низкий
12 месяцев назад
github логотип
GHSA-p6r5-883m-2c48

The login functionality of the web server in affected devices does not normalize the response times of login attempts. An unauthenticated remote attacker could exploit this side-channel information to distinguish between valid and invalid usernames.

CVSS3: 5.3
0%
Низкий
12 месяцев назад

Уязвимостей на страницу