CVE-2017-3156

CVE-2017-3156

The OAuth2 Hawk and JOSE MAC Validation code in Apache CXF prior to 3.0.13 and 3.1.x prior to 3.1.10 is not using a constant time MAC signature comparison algorithm which may be exploited by sophisticated timing attacks.

Source: CVE-2017-3156

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다