CVE-2017-12872 | BDVDB-2026-89876 Detail

Description#

The (1) Htpasswd authentication source in the authcrypt module and (2) SimpleSAML_Session class in SimpleSAMLphp 1.14.11 and earlier allow remote attackers to conduct timing side-channel attacks by leveraging use of the standard comparison operator to compare secret material against user input.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12017-09-01Record published in the CVE List.
2. Version 22024-08-05Most recent update recorded in the CVE List.