Jasypt
1 CVEs
product
Monthly
jasypt before 1.9.2 allows a timing attack against the password hash comparison. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.
Information Disclosure
Jasypt
NVD
CVSS 3.0
7.5
EPSS
0.7%
CVE-2014-9970
Maven
EPSS 1%
CVSS 7.5
HIGH
PATCH
This Week
jasypt before 1.9.2 allows a timing attack against the password hash comparison. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.
Information Disclosure
Jasypt
NVD