CVE-2014-125056CWE-208

Pylons horus services.py timing discrepancy

Low · published January 7, 2023

CVSS v3.1
2.6
EPSS
1%
Percentile
53.4
In the wild
Unconfirmed
What it is

A vulnerability was found in Pylons horus and classified as problematic. Affected by this issue is some unknown functionality of the file horus/flows/local/services.py. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high. The exploitation is known to be difficult. The patch is identified as fd56ccb62ce3cbdab0484fe4f9c25c4eda6c57ec. It is recommended to apply a patch to fix this issue. VDB-217598 is the identifier assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
2.6 · LOW
Vector
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00720 · 53.4th percentile
Weakness
CWE-208 · Observable Timing Discrepancy
Published
2023-01-07T09:06Z
EPSS history
Timeline
  • 07 JAN 09:06Z
    Pylons horus services.py timing discrepancy
    cvelistv5