CWE-208.

Hono added timing comparison hardening in basicAuth and bearerAuth

• CWE-208

<4.11.10 · fixed in 4.11.10

Apache Shiro Affected by an Observable Timing Discrepancy Vulnerability

• CWE-208

<2.1.0 · fixed in 2.1.0

Trilium Notes has a Timing Attack Vulnerability in /api/login/sync

• Trilium
• CWE-208

PrestaShop affected by time based enumeration in FO login form

• CWE-208

<8.2.4 || >=9.0.0-alpha.1, <9.0.3 · fixed in 8.2.4, 9.0.3

Django has Observable Timing Discrepancy

• CWE-208

>=4.2a1, <4.2.28 || >=5.2a1, <5.2.11 || >=6.0a1, <6.0.2 · fixed in 4.2.28, 5.2.11, 6.0.2

OctoPrint has Timing Side-Channel Vulnerability in API Key Authentication

• CWE-208

<1.11.6 · fixed in 1.11.6

Spring Security has a broken timing attack mitigation implemented in DaoAuthenticationProvide

• CWE-208

>=6.3.8, <6.3.9 || >=6.4.4, <6.4.5 · fixed in 6.3.9, 6.4.5

FastAPI Api Key has a timing side-channel in verify_key that allows statistical key validity detection

• CWE-208

<1.1.0 · fixed in 1.1.0

File Browser Vulnerable to Username Enumeration via Timing Attack in /api/login

• Information disclosure
• CWE-208

<=1.11.0 · no fixed version yet

Non-constant-time code generation on ARM32 targets

• CWE-208

>=0.0.0-0, <0.4.4 · fixed in 0.4.4

Gallagher HBUS Devices: Observable Timing Discrepancy (CWE-208) in HBUS devices may allow an attacker with…

• Gallagher HBUS Devices
• CWE-208

Mattermost has an Observable Timing Discrepancy vulnerability in github.com/mattermost/mattermost-server

• CWE-208

>=10.5.0+incompatible, <10.5.11+incompatible || >=10.11.0+incompatible, <10.11.3+incompatible · fixed in 10.5.11+incompatible, 10.11.3+incompatible

Mbed TLS through 3.6.4 has an Observable Timing Discrepancy.

• CWE-208

Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.

• CWE-208

Dragonfly vulnerable to timing attacks against Proxy’s basic authentication in d7y.io/dragonfly

• CWE-208

<2.1.0 · fixed in 2.1.0

Timing-Based Username Enumeration in DivvyDrive Information Technologies' DivvyDrive Web

• DivvyDrive Information Technologies Inc. DivvyDrive Web
• Information disclosure
• CWE-208

Timing Attack Vulnerability in SCRAM Authentication

• CWE-208
• CWE-385

<3.2 · fixed in 3.2

httpsig-rs: HMAC verification is vulnerable to timing attack

• CWE-208

<0.0.19 · fixed in 0.0.19

Liferay Portal exposes ERC which can lead to exploit the time response attack

• Cross-site scripting (XSS)
• Information disclosure

>=5.0.4, <5.0.83 · fixed in 5.0.83

Timing side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in Oberon PSA Crypto library

• Oberon microsystems AG Oberon PSA Crypto
• Weak cryptography or TLS
• CWE-208

Timing side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in ocrypto library

• Oberon microsystems AG ocrypto
• Weak cryptography or TLS
• CWE-208

Liferay Portal Username Enumeration Vulnerability

• CWE-208

>=7.4.0-ga1, <=7.4.3.132-ga132 · no fixed version yet

Intel(R) CSME and Intel(R) SPS: Observable timing discrepancy in firmware for some Intel(R) CSME and Intel(R) SPS may…

• Intel(R) CSME and Intel(R) SPS
• CWE-208

riscv-boom SonicBOOM L1 Data Cache timing discrepancy

• riscv-boom SonicBOOM
• Information disclosure
• CWE-208

Quiet uses insecure, inconsistent verification on local backend token

• quiet
• CWE-208

SignXML's signature verification with HMAC is vulnerable to a timing attack

• CWE-208

<4.0.4 · fixed in 4.0.4

Potential Timing Side-Channel Vulnerability in vLLM’s Chunk-Based Prefix Caching

• CWE-208

<0.9.0 · fixed in 0.9.0

Mattermost vulnerable to Observable Timing Discrepancy

• CWE-208

<2.1.0 · fixed in 2.1.0

User enumeration via timing attack in Zabbix web interface

• Zabbix
• CWE-208

String::Compare::ConstantTime for Perl through 0.321 is vulnerable to timing attacks that allow an attacker to guess the length of a secret string

• FRACTAL String::Compare::ConstantTime
• CWE-208

An issue was discovered in OpenSlides before 4.2.5.

• Intevation OpenSlides
• CWE-208

Post-Quantum Secure Feldman's Verifiable Secret Sharing has Timing Side-Channels in Matrix Operations

• Information disclosure
• CWE-208

<=0.8.0b2 · no fixed version yet

IBM Common Cryptographic Architecture information disclosure

• IBM Common Cryptographic Architecture
• IBM 4769 Developers Toolkit
• CWE-208

Security Update for the OPC UA .NET Standard Stack

• Broken access control
• CWE-208

<1.5.374.158 · fixed in 1.5.374.158

An issue was discovered in the Winbox service of MikroTik RouterOS long-term release v6.43.13 through v6.49.13 and stable v6.43 through v7.17.2.

• CWE-208

Duplicate Advisory: Authorization Bypass in OPC UA .NET Standard Stack

• Broken access control
• CWE-208

<1.5.374.158 · fixed in 1.5.374.158

Apache Hive vulnerable to Observable Timing Discrepancy and Authentication Bypass by Spoofing

• Authentication bypass
• CWE-208

<4.0.0 · fixed in 4.0.0

Issue with AWS Sign-in IAM User Login Flow - Possible Username Enumeration

• AWS Sign-in IAM Login Flow
• CWE-204
• CWE-208

GNU GRUB2: GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for…

• GNU GRUB2
• CWE-208

authentik allows a timing attack due to missing constant time comparison for metrics view

• authentik
• CWE-208

Intel(R) QAT Engine for OpenSSL software: Observable timing discrepancy in some Intel(R) QAT Engine for OpenSSL software before…

• Intel(R) QAT Engine for OpenSSL software
• CWE-208

IBM TXSeries for Multiplatforms information disclosure

• IBM TXSeries for Multiplatforms
• CWE-208

Timing Attack in mudler/localai

• mudler/localai
• CWE-208

Gradio performs a non-constant-time comparison when comparing hashes

• Information disclosure
• CWE-208

<4.44.0 · fixed in 4.44.0

basic-auth-connect's callback uses time unsafe string comparison

• CWE-208

<1.1.0 · fixed in 1.1.0

Timing-Based Username Enumeration Vulnerability in Fides Webserver Authentication

• CWE-208

<2.44.0 · fixed in 2.44.0

AES T-Table sub-cache-line leakage

• wolfSSL
• CWE-208

An issue was discovered in Matrix libolm through 3.2.16.

• CWE-208

Answer has Observable Timing Discrepancy in github.com/answerdev/answer

• CWE-208

<1.0.6 · fixed in 1.0.6

easy-scrypt Observable Timing Discrepancy vulnerability in github.com/agnivade/easy-scrypt

• CWE-208

<1.0.0 · fixed in 1.0.0

open-telemetry has an Observable Timing Discrepancy

• CWE-208

>=0.80.0, <0.107.0 · fixed in 0.107.0

Windows Kerberos Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows Server 2019
• CWE-208

In JetBrains TeamCity before 2024.07 comparison of authorization tokens took non-constant time

• JetBrains TeamCity
• CWE-208

Usage of non-constant time base64 decoder could lead to leakage of secret key material

• CWE-208

>=0.0.0-0, <0.7.0 · fixed in 0.7.0

Django vulnerable to user enumeration attack

• CWE-208

>=4.2, <4.2.14 || >=5.0, <5.0.7 · fixed in 4.2.14, 5.0.7

Control-flow timing leak in Kyber reference implementation when compiled with Clang 15-18 for -Os, -O1 and other options

• open-quantum-safe liboqs
• CWE-208
• CWE-385

Dell BSAFE Crypto-C Micro Edition: Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5…

• Dell BSAFE Crypto-C Micro Edition
• Dell BSAFE Micro Edition Suite
• CWE-208

Perl-crypt-openssl-rsa: side-channel attack in pkcs#1 v1.5 padding mode (marvin attack)

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• CWE-208

Rust-openssl: timing based side-channel can lead to a bleichenbacher style attack

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-208

vantage6 vulnerable to a username timing attack on recover password/MFA token

• Race condition
• CWE-208

<4.3.0 · fixed in 4.3.0