Description

An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variable in hmac.compare_digest.

Remediation

References

CVE-2022-48566

Related Vulnerabilities

WebLogic CVE-2019-2395 Vulnerability (CVE-2019-2395)

Oracle Application Server Other Vulnerability (CVE-2002-1858)

WordPress Plugin Form Store to DB Unspecified Vulnerability (1.1.0)

WordPress Plugin WooCommerce Checkout Manager Arbitrary File Upload (4.2.6)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7740)

Severity

High

Classification

CVE-2022-48566 CWE-362 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities