Vulnerability RUSTSEC-2022-0018
Medium Risk
MEDIUM RISK
CVSS Score: 4.2
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
4 years ago
May 09, 2022 at 12:00 PM UTC
Timing attack
0.2.0 - 1.0.0
0.2.0 - 1.0.0
Summary
Timing attack
Details
Affecting versions did not compare tokens in constant time, which could make it possible for an attacker to guess the 2fa token of a user.
This has been fixed by using using the crate constant_time_eq for comparison.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Impacted packages
Timeline
Published
4 years ago
May 09, 2022 at 12:00 PM UTC
Fixed (1.1.0)
4 years ago
April 24, 2022 at 02:57 PM UTC
Last Modified
1 day ago
October 12, 2026 at 06:00 PM UTC