CWE-208: Observable Timing Discrepancy, page 5
Filter
Two separate operations in a product require different amounts of time to complete, in a way that is observable to an actor and reveals security-relevant information about the state of the product, such as whether a particular operation was successful or not.
What the weakness is: CWE-208 at MITRE. All weaknesses
Related attack patterns (CAPEC): 3
- CAPEC-462 Cross-Domain Search Timing Severity: Medium
- CAPEC-541 Application Fingerprinting Severity: Low
- CAPEC-580 System Footprinting Likelihood: Low · Severity: Low
The attack patterns MITRE's CAPEC relates to CWE-208, as MITRE names them. Credits.
Ask an AI about CWE-208
Show the prompt
Explain CWE-208: Observable Timing Discrepancy and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/208.html and https://cve.bz/cve/cwe/208?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 5.5CVE-2021-26313EPSS 0.3%
Potential speculative code store bypass in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution of overwritten instructions, may cause an incorrect speculation and could result in data …
- 2.5CVE-2021-31406EPSS 0.2%
Non-constant-time comparison of CSRF tokens in endpoint request handler in com.vaadin:flow-server versions 3.0.0 through 5.0.3 (Vaadin 15.0.0 through 18.0.6), and com.vaadin:fusion-endpoint version 6.0.0 (Vaadin 19.0.0) allows attacker to …
- 2.5CVE-2021-31404EPSS 0.2%
Non-constant-time comparison of CSRF tokens in UIDL request handler in com.vaadin:flow-server versions 1.0.0 through 1.0.13 (Vaadin 10.0.0 through 10.0.16), 1.1.0 prior to 2.0.0 (Vaadin 11 prior to 14), 2.0.0 through 2.4.6 (Vaadin 14.0.0 t…
- 2.5CVE-2021-31403EPSS 0.3%
Non-constant-time comparison of CSRF tokens in UIDL request handler in com.vaadin:vaadin-server versions 7.0.0 through 7.7.23 (Vaadin 7.0.0 through 7.7.23), and 8.0.0 through 8.12.2 (Vaadin 8.0.0 through 8.12.2) allows attacker to guess a …
- 5.9CVE-2020-1926EPSS 2.5%
Apache Hive cookie signature verification used a non constant time comparison which is known to be vulnerable to timing attacks. This could allow recovery of another users cookie signature. The issue was addressed in Apache Hive 2.3.8
- 5.9CVE-2020-15237EPSS 1.0%
In Shrine before version 3.3.0, when using the `derivation_endpoint` plugin, it's possible for the attacker to use a timing attack to guess the signature of the derivation URL. The problem has been fixed by comparing sent and calculated si…
- 2.4CVE-2020-4071EPSS 0.4%
In django-basic-auth-ip-whitelist before 0.3.4, a potential timing attack exists on websites where the basic authentication is used or configured, i.e. BASIC_AUTH_LOGIN and BASIC_AUTH_PASSWORD is set. Currently the string comparison betwee…
- 4.7CVE-2020-11037EPSS 0.2%
In Wagtail before versions 2.7.3 and 2.8.2, a potential timing attack exists on pages or documents that have been protected with a shared password through Wagtail's "Privacy" controls. This password check is performed through a character-b…
- 5.9CVE-2019-16782EPSS 3.7%
There's a possible information leak / session hijack vulnerability in Rack (RubyGem rack). This vulnerability is patched in versions 1.6.12 and 2.0.8. Attackers may be able to find and hijack sessions by using timing attacks targeting the …
- 5.9CVE-2019-13420EPSS 1.2%
Search Guard versions before 21.0 had an timing side channel issue when using the internal user database.
- 5.9CVE-2019-9494EPSS 3.9%
The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns. An attacker may be able to gain leaked information from a side channel …
- 5.9CVE-2016-10535EPSS 1.3%
csrf-lite is a cross-site request forgery protection library for framework-less node sites. csrf-lite uses `===`, a fail first string comparison, instead of a time constant string comparison This enables an attacker to guess the secret in …