Description

An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variable in hmac.compare_digest.

Remediation

References

CVE-2022-48566

Related Vulnerabilities

Oracle JRE CVE-2022-21293 Vulnerability (CVE-2022-21293)

Oracle Database Server CVE-2010-4413 Vulnerability (CVE-2010-4413)

WordPress Plugin Newsletter-Send awesome emails from WordPress Cross-Site Scripting (7.8.9)

CrushFTP Server URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-14038)

WordPress Plugin Zedity:The Easiest Way To Create Posts & Pages Cross-Site Scripting (2.5.0)

Severity

High

Classification

CVE-2022-48566 CWE-362 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities