Description

An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variable in hmac.compare_digest.

Remediation

References

CVE-2022-48566

Related Vulnerabilities

WordPress Plugin MiwoFTP-File & Folder Manager Arbitrary File Disclosure (1.0.4)

SugarCRM CVE-2023-35809 Vulnerability (CVE-2023-35809)

Oracle Database Server CVE-2010-0902 Vulnerability (CVE-2010-0902)

WordPress Plugin Quick Featured Images Cross-Site Scripting (12.3.5)

Oracle HTTP Server CVE-2021-35666 Vulnerability (CVE-2021-35666)

Severity

High

Classification

CVE-2022-48566 CWE-362 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities