Open on HackerOneSign in

WP API · Report #31168

Cryptographic Side Channel in OAuth Library

Validstatus

4upvotes

29 Oct 2014disclosed

How it was found

Because hashes and tokens are compared with the !== and === operators, these checks may be susceptible to timing attacks. More info: http://codahale.com/a-lesson-in-timing-attacks/

Affected code:

https://github.com/WP-API/OAuth1/blob/45197eca2925f5022192903d3639decd0ae1811c/lib/class-wp-json-authentication-oauth1.php#L562 https://github.com/WP-API/OAuth1/blob/45197eca2925f5022192903d3639decd0ae1811c/lib/class-wp-json-authentication-oauth1.php#L290

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original