hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 04:36:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

Python: Lower precision of non-header queries

Browse Source 
cf. https://github.com/github/securitylab/issues/691#issuecomment-1387391014
This commit is contained in:
Taus
2023-03-27 12:22:17 +00:00
parent eaf2930205
commit 700eb04487
4 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash/PossibleTimingAttackAgainstHash.ql
View File

@@ -6,7 +6,7 @@
* A successful attack can result in authentication bypass.
* @kind path-problem
* @problem.severity error
* @precision medium
* @precision low
* @id py/possible-timing-attack-against-hash
* @tags security
* external/cwe/cwe-208

2
python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash/TimingAttackAgainstHash.ql
View File

@@ -6,7 +6,7 @@
* A successful attack can result in authentication bypass.
* @kind path-problem
* @problem.severity error
* @precision high
* @precision low
* @id py/timing-attack-against-hash
* @tags security
* external/cwe/cwe-208

2
python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo/PossibleTimingAttackAgainstSensitiveInfo.ql
View File

@@ -4,7 +4,7 @@
* possibly allowing a timing attack to retrieve sensitive information.
* @kind path-problem
* @problem.severity error
* @precision medium
* @precision low
* @id py/possible-timing-attack-sensitive-info
* @tags security
* external/cwe/cwe-208

2
python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo/TimingAttackAgainstSensitiveInfo.ql
View File

@@ -4,7 +4,7 @@
* possibly allowing a timing attack to retrieve sensitive information.
* @kind path-problem
* @problem.severity error
* @precision high
* @precision low
* @id py/timing-attack-sensitive-info
* @tags security
* external/cwe/cwe-208