Falhas do tipo CWE-203

398 resultados

Discrepância Observável em Comportamento

Ocorre quando o sistema exibe comportamentos ou mensagens diferentes dependendo de informações secretas (senha, token, chave), permitindo que um atacante deduza essas informações através de análise de resposta. O perigo está em vazar conhecimento que deveria ser privado por meio de canais laterais, como tempo de resposta, mensagens de erro ou mudanças visuais.

Exemplo

Um formulário de login que retorna 'Usuário não existe' para usuários inválidos e 'Senha incorreta' para usuários válidos com senha errada. Um atacante usa essas mensagens diferentes para enumerar contas válidas sem nunca adivinhar a senha correta.

Como mitigar

Padronize respostas do sistema: retorne sempre a mesma mensagem genérica (ex: 'Credenciais inválidas') e o mesmo tempo de resposta, independentemente de qual parte falhou. Use técnicas como constant-time comparison para operações sensíveis e evite vazar informações através de timing, códigos HTTP diferenciados ou feedback textual discriminador.

CVE-2021-33845MEDIUMUsername enumeration through lockout message in REST APIEPSS 0.9%CVE-2024-30171MEDIUMAn issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes EPSS 0.9%CVE-2024-25190CRITICALl8w8jwt 2.2.1 uses memcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timingEPSS 0.9%CVE-2024-25191CRITICALphp-jwt 1.0.0 uses strcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timingEPSS 0.9%CVE-2022-40482MEDIUMThe authentication method in Laravel 8.x through 9.x before 9.32.0 was discovered to be vulnerable to user enumeration via timeless timing aEPSS 0.9%CVE-2024-0914MEDIUMOpencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)EPSS 0.9%CVE-2026-97788HIGHActive Directory Federation Services (AD FS) Information Disclosure VulnerabilityEPSS 0.9%CVE-2023-1707HIGHCertain HP Enterprise LaserJet and HP LaserJet Managed Printers are potentially vulnerable to information disclosure when IPsec is enabled wEPSS 0.9%CVE-2022-30332MEDIUMIn Talend Administration Center 7.3.1.20200219 before TAC-15950, the Forgot Password feature provides different error messages for invalid rEPSS 0.9%CVE-2023-26556CRITICALio.finnet tss-lib before 2.0.0 can leak a secret key via a timing side-channel attack because it relies on the scalar-multiplication implemeEPSS 0.9%CVE-2023-26557HIGHio.finnet tss-lib before 2.0.0 can leak the lambda value of a private key via a timing side-channel attack because it relies on Go big.Int, EPSS 0.9%CVE-2022-29185MEDIUMObservable Timing Discrepancy in totp-rsEPSS 0.9%CVE-2022-46392MEDIUMAn issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to precise enough information about memory EPSS 0.9%CVE-2021-3642—A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer maEPSS 0.8%CVE-2020-26062MEDIUMCisco Integrated Management Controller Username Enumeration VulnerabilityEPSS 0.8%CVE-2023-30458MEDIUMA username enumeration issue was discovered in Medicine Tracker System 1.0. The login functionality allows a malicious user to guess a validEPSS 0.8%CVE-2023-34669—TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in function RebootSystem of the file lib/cste_modules/system which caEPSS 0.8%CVE-2024-21210LOWVulnerability in Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, EPSS 0.8%CVE-2022-43411MEDIUMJenkins GitLab Plugin 1.5.35 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhooEPSS 0.8%CVE-2023-20575MEDIUM A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionEPSS 0.8%