CVE-2017-12872

The (1) Htpasswd authentication source in the authcrypt module and (2) SimpleSAML_Session class in SimpleSAMLphp 1.14.11 and earlier allow remote attackers to…

published September 1, 2017

CVSS
—
EPSS
1%
Percentile
73.3
In the wild
Unconfirmed
What it is

The (1) Htpasswd authentication source in the authcrypt module and (2) SimpleSAML_Session class in SimpleSAMLphp 1.14.11 and earlier allow remote attackers to conduct timing side-channel attacks by leveraging use of the standard comparison operator to compare secret material against user input.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01459 · 73.3th percentile
Published
2017-09-01T21:00Z
EPSS history
Timeline
  • 01 SEP 21:00Z
    The (1) Htpasswd authentication source in the authcrypt module and (2) SimpleSAML_Session class in SimpleSAMLphp 1.14.11 and earlier allow remote attackers to…
    cvelistv5