Weaknesses of type CWE-203

308 results

Discrepância observável em resposta de erro

A aplicação expõe informações diferentes em suas respostas de erro dependendo de condições internas (ex: usuário existe ou não, senha correta ou não, arquivo encontrado ou não), permitindo que um atacante deduza informações sensíveis através de análise de timing, mensagens ou códigos de status. O risco está em vazar informações que não deveriam ser públicas.

Example

Um endpoint de login retorna 'Usuário não encontrado' quando o email não existe, mas 'Senha incorreta' quando o email existe mas a senha está errada. Um atacante usa essas mensagens para enumerar emails válidos da plataforma sem precisar saber a senha de ninguém.

How to mitigate

Padronize todas as respostas de erro para o mesmo status HTTP e mensagem genérica (ex: sempre 'Credenciais inválidas'). Use timing constante nas verificações criptográficas e operações sensíveis para evitar ataques por timing side-channel.

CVE-2024-25191CRITICALphp-jwt 1.0.0 uses strcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timingEPSS 0.9%CVE-2022-40482MEDIUMThe authentication method in Laravel 8.x through 9.x before 9.32.0 was discovered to be vulnerable to user enumeration via timeless timing aEPSS 0.9%CVE-2010-10006LOWmichaelliao jopenid OpenIdManager.java getAuthentication timing discrepancyEPSS 0.9%CVE-2025-41252HIGHUsername enumeration vulnerabilityEPSS 0.9%CVE-2024-0914MEDIUMOpencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)EPSS 0.9%CVE-2023-1707HIGHCertain HP Enterprise LaserJet and HP LaserJet Managed Printers are potentially vulnerable to information disclosure when IPsec is enabled wEPSS 0.9%CVE-2023-26557HIGHio.finnet tss-lib before 2.0.0 can leak the lambda value of a private key via a timing side-channel attack because it relies on Go big.Int, EPSS 0.9%CVE-2023-26556CRITICALio.finnet tss-lib before 2.0.0 can leak a secret key via a timing side-channel attack because it relies on the scalar-multiplication implemeEPSS 0.9%CVE-2021-33845MEDIUMUsername enumeration through lockout message in REST APIEPSS 0.9%CVE-2023-33850HIGHIBM GSKit-Crypto information disclosureEPSS 0.9%CVE-2021-3642—A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer maEPSS 0.8%CVE-2022-30332MEDIUMIn Talend Administration Center 7.3.1.20200219 before TAC-15950, the Forgot Password feature provides different error messages for invalid rEPSS 0.8%CVE-2023-30458MEDIUMA username enumeration issue was discovered in Medicine Tracker System 1.0. The login functionality allows a malicious user to guess a validEPSS 0.8%CVE-2023-34669—TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in function RebootSystem of the file lib/cste_modules/system which caEPSS 0.8%CVE-2020-26062MEDIUMCisco Integrated Management Controller Username Enumeration VulnerabilityEPSS 0.8%CVE-2024-21210LOWVulnerability in Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, EPSS 0.8%CVE-2022-29185MEDIUMObservable Timing Discrepancy in totp-rsEPSS 0.8%CVE-2023-20575MEDIUM A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionEPSS 0.8%CVE-2022-23643MEDIUMSide-channel attack in Sourcegraph Code MonitorsEPSS 0.8%CVE-2022-46392MEDIUMAn issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to precise enough information about memory EPSS 0.8%