Weaknesses of type CWE-208

192 results

Discrepância de Tempo Observável

É quando o tempo de execução de uma operação varia dependendo do input (ex: senha, token, chave criptográfica), e essa variação é observável por um atacante. O código "vaza" informação sensível através do timing, permitindo descobrir dados sem acesso direto a eles.

Example

Uma função de validação de senha que compara caractere por caractere e retorna no primeiro erro: comparar 'abc123' (erro rápido no 1º char) vs 'abcdef' (erro mais lento no 5º char) revela ao atacante qual início de senha está correto, possibilitando brute force muito mais eficiente.

How to mitigate

Use comparações de tempo constante (constant-time comparison) para operações sensíveis, independente do resultado: bibliotecas como `hmac.compare()` em Node.js ou `secrets.compare()` em Python. Para autenticação, sempre complete o fluxo de validação antes de retornar qualquer resultado.

CVE-2026-82449MEDIUMCockpit CMS before 2.14.1 Account Enumeration via Auth TimingEPSS 0.2%CVE-2026-6291MEDIUMBleichenbacher padding oracle in PKCS#7 KTRI RSA PKCS#1 v1.5 decryptionEPSS 0.2%CVE-2026-21840LOWHCL BigFix Platform is affected by a user enumeration vulnerabilityEPSS 0.2%CVE-2025-9031MEDIUMTiming-Based Username Enumeration in DivvyDrive Information Technologies' DivvyDrive WebEPSS 0.2%CVE-2025-29780MEDIUMPost-Quantum Secure Feldman's Verifiable Secret Sharing has Timing Side-Channels in Matrix OperationsEPSS 0.2%CVE-2026-39321MEDIUMParse Server has a login timing side-channel reveals user existenceEPSS 0.2%CVE-2025-48995MEDIUMSignXML's signature verification with HMAC is vulnerable to a timing attackEPSS 0.2%CVE-2026-27882MEDIUMCoolify: Timing Attack in GitLab Webhook Token ValidationEPSS 0.2%CVE-2026-41407MEDIUMOpenClaw < 2026.4.2 - Timing Side Channel in Shared-Secret ComparisonEPSS 0.2%CVE-2026-23901LOWApache Shiro: Brute force attack possible to determine valid user namesEPSS 0.2%CVE-2026-48011LOWShopware: Timing-attack on admin panel allowing enumeration of administrator usernamesEPSS 0.2%CVE-2026-42602HIGHazureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replayEPSS 0.2%CVE-2025-54764MEDIUMMbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcEPSS 0.2%CVE-2026-22746LOWUser Attribute Enumeration when Using DaoAuthenticationProviderEPSS 0.2%CVE-2026-84308MEDIUMphpseclib — non-constant-time X25519 scalar multiplication permits full private-key recoveryEPSS 0.2%CVE-2026-87737MEDIUMAn issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalaEPSS 0.2%CVE-2021-31406MEDIUMTiming side channel vulnerability in endpoint request handler in Vaadin 15-19EPSS 0.2%CVE-2021-31404MEDIUMTiming side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18EPSS 0.2%CVE-2023-25000MEDIUMVault Vulnerable to Cache-Timing Attacks During Seal and Unseal OperationsEPSS 0.2%CVE-2026-45410MEDIUMTime-based user enumeration in TREK authentication endpointEPSS 0.2%