CVE-2023-20572
2026-06-26
16h16 +00:00
16h16 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing the input of an arbitrary message, potentially leading to a loss of data integrity.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Observable Timing Discrepancy Two separate operations in a product require different amounts of time to complete, in a way that is observable to an actor and reveals security-relevant information about the state of the product, such as whether a particular operation was successful or not. |
