CVE-2014-9970
21.05.2017, 18:29
jasypt before 1.9.2 allows a timing attack against the password hash comparison.Enginsight
| Vendor | Product | Version |
|---|---|---|
| jasypt_project | jasypt | 𝑥 ≤ 1.9.1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| jasypt |
|
Common Weakness Enumeration
References