CVE-2024-36469
LOWDescription
Execution time for an unsuccessful login differs when using a non-existing username compared to using an existing one.
Is your site exposed to CVE-2024-36469?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| zabbix | zabbix |
| zabbix | zabbix |
| zabbix | zabbix |
| zabbix | zabbix |
References
Advisories & Patches
Other References
Frequently Asked Questions
What is CVE-2024-36469? +
How severe is CVE-2024-36469? +
What products are affected by CVE-2024-36469? +
How do I check if I'm vulnerable to CVE-2024-36469? +
Related Vulnerabilities
When verifying a mac with a ChunkedMacVerification object, Tink compares the resulting tag with non constant time comparison. This potentially …
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash …
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash …
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 44.0.0 until 50.0.0, pkcs7_decrypt_der, pkcs7_decrypt_pem, …
PyQuorum is a cryptographic library for secret sharing and key management. Prior to 0.2.1, the mul_mod function implements multiplication via …
In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference …
