jasypt before 1.9.2 allows a timing attack against the password hash comparison.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.securitytracker.com/id/1040360 | vdb-entry x_refsource_SECTRACK |
| https://access.redhat.com/errata/RHSA-2017:2809 | vendor-advisory x_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2017:2547 | vendor-advisory x_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2017:2810 | vendor-advisory x_refsource_REDHAT |
| http://www.securitytracker.com/id/1039744 | vdb-entry x_refsource_SECTRACK |
| https://access.redhat.com/errata/RHSA-2018:0294 | vendor-advisory x_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2017:2808 | vendor-advisory x_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2017:2546 | vendor-advisory x_refsource_REDHAT |
| https://sourceforge.net/p/jasypt/code/668/ | x_refsource_CONFIRM |
| https://access.redhat.com/errata/RHSA-2017:3141 | vendor-advisory x_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2017:2811 | vendor-advisory x_refsource_REDHAT |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.securitytracker.com/id/1040360 | vdb-entry x_refsource_SECTRACK x_transferred |
| https://access.redhat.com/errata/RHSA-2017:2809 | vendor-advisory x_refsource_REDHAT x_transferred |
| https://access.redhat.com/errata/RHSA-2017:2547 | vendor-advisory x_refsource_REDHAT x_transferred |
| https://access.redhat.com/errata/RHSA-2017:2810 | vendor-advisory x_refsource_REDHAT x_transferred |
| http://www.securitytracker.com/id/1039744 | vdb-entry x_refsource_SECTRACK x_transferred |
| https://access.redhat.com/errata/RHSA-2018:0294 | vendor-advisory x_refsource_REDHAT x_transferred |
| https://access.redhat.com/errata/RHSA-2017:2808 | vendor-advisory x_refsource_REDHAT x_transferred |
| https://access.redhat.com/errata/RHSA-2017:2546 | vendor-advisory x_refsource_REDHAT x_transferred |
| https://sourceforge.net/p/jasypt/code/668/ | x_refsource_CONFIRM x_transferred |
| https://access.redhat.com/errata/RHSA-2017:3141 | vendor-advisory x_refsource_REDHAT x_transferred |
| https://access.redhat.com/errata/RHSA-2017:2811 | vendor-advisory x_refsource_REDHAT x_transferred |