CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.9. It may be remotely exploitable.
CVE
CVE-2017-12872
Severity
MEDIUM
CVSS
5.9
EPSS
1.45%
Original NVD Description
The (1) Htpasswd authentication source in the authcrypt module and (2) SimpleSAML_Session class in SimpleSAMLphp 1.14.11 and earlier allow remote attackers to conduct timing side-channel attacks by leveraging use of the standard comparison operator to compare secret material against user input.
Related CVEs
Other vulnerabilities affecting the same vendor(s)