GHSA-p6r5-883m-2c48

GHSA-p6r5-883m-2c48 PUBLISHED CVSS 5.300000190734863 MEDIUM

Record from GitHub Advisory Database · Published February 11, 2025

The login functionality of the web server in affected devices does not normalize the response times of login attempts. An unauthenticated remote attacker could exploit this side-channel information to distinguish between valid and invalid usernames.

Risk scores

CVSS 3.1

5.300000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Timeline

Feb 11, 2025 CVE Published
May 1, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-p6r5-883m-2c48
vulnetix vdb fixes GHSA-p6r5-883m-2c48

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-p6r5-883m-2c48/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://nvd.nist.gov/vuln/detail/CVE-2023-37482 advisory
https://cert-portal.siemens.com/productcert/html/ssa-195895.html url

Look up in the Resolve Platform →