CVE-2017-9735

Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing…

published June 16, 2017

CVSS
—
EPSS
6%
Percentile
93.0
In the wild
Unconfirmed
What it is

Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before rejection of incorrect passwords.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05795 · 93.0th percentile
Published
2017-06-16T21:00Z
EPSS history
Timeline
  • 16 JUN 21:00Z
    Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing…
    cvelistv5