CVE-2023-20572
2026-06-26
16h16 +00:00
16h16 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing the input of an arbitrary message, potentially leading to a loss of data integrity.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Observable Timing Discrepancy Two separate operations in a product require different amounts of time to complete, in a way that is observable to an actor and reveals security-relevant information about the state of the product, such as whether a particular operation was successful or not. |
