7.5
CVSSv3

CVE-2014-9970

Published: 21/05/2017 Updated: 14/02/2018
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

jasypt prior to 1.9.2 allows a timing attack against the password hash comparison.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

jasypt project jasypt

Vendor Advisories

Synopsis Moderate: Red Hat Single Sign-On security update Type/Severity Security Advisory: Moderate Topic Red Hat Single Sign-On 713 is now available for download from the Customer PortalRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring ...
Synopsis Moderate: rh-sso7-keycloak security update Type/Severity Security Advisory: Moderate Topic An update for rh-sso7-keycloak is now available for Red Hat Single Sign-On 71 for RHEL 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring ...
Synopsis Moderate: rh-sso7-keycloak security update Type/Severity Security Advisory: Moderate Topic An update for rh-sso7-keycloak is now available for Red Hat Single Sign-On 71 for RHEL 6Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring ...
Synopsis Important: eap7-jboss-ec2-eap security update Type/Severity Security Advisory: Important Topic An update for eap7-jboss-ec2-eap is now available for Red Hat JBoss Enterprise Application Platform 70 for Red Hat Enterprise Linux 6 and Red Hat JBoss Enterprise Application Platform 70 for Red Hat Ent ...
Synopsis Important: Red Hat JBoss Enterprise Application Platform security update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat JBoss Enterprise Application Platform 70 for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a securi ...
Synopsis Important: Red Hat JBoss Enterprise Application Platform security update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat JBoss Enterprise Application PlatformRed Hat Product Security has rated this update as having a security impact of Important A Common Vu ...
Synopsis Important: Red Hat JBoss Enterprise Application Platform security update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat JBoss Enterprise Application Platform 70 for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a securi ...
Synopsis Important: Red Hat JBoss Data Grid 712 security update Type/Severity Security Advisory: Important Topic Red Hat JBoss Data Grid 712 is now available for download from the Customer PortalRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerabil ...
Synopsis Important: rhvm-appliance security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic An update for rhvm-appliance is now available for RHEV 4X RHEV-H and Agents for RHEL-7Red Hat Product Security has rated this update as having a security impact of Important A Com ...
A vulnerability was found in Jasypt that would allow an attacker to perform a timing attack on password hash comparison ...