Junglewise Threat Intelligence

CVE-2019-10071: Timing attack on HMAC signature comparison in Apache Tapestry

CVE-2019-10071 · Severity: low · CVSS 3.1 · Published 2019-09-26

Technologies: org.apache.tapestry:tapestry-core (Maven). Vendors: Maven.

Executive brief

Timing attack on HMAC signature comparison in Apache Tapestry

Affected products

  • Maven org.apache.tapestry:tapestry-core

Related threats