Skip to content

Commit 700eb04

Browse files
committed
Python: Lower precision of non-header queries
cf. github/securitylab#691 (comment)
1 parent eaf2930 commit 700eb04

File tree

4 files changed

+4
-4
lines changed

4 files changed

+4
-4
lines changed

python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash/PossibleTimingAttackAgainstHash.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66
* A successful attack can result in authentication bypass.
77
* @kind path-problem
88
* @problem.severity error
9-
* @precision medium
9+
* @precision low
1010
* @id py/possible-timing-attack-against-hash
1111
* @tags security
1212
* external/cwe/cwe-208

python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash/TimingAttackAgainstHash.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66
* A successful attack can result in authentication bypass.
77
* @kind path-problem
88
* @problem.severity error
9-
* @precision high
9+
* @precision low
1010
* @id py/timing-attack-against-hash
1111
* @tags security
1212
* external/cwe/cwe-208

python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo/PossibleTimingAttackAgainstSensitiveInfo.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
* possibly allowing a timing attack to retrieve sensitive information.
55
* @kind path-problem
66
* @problem.severity error
7-
* @precision medium
7+
* @precision low
88
* @id py/possible-timing-attack-sensitive-info
99
* @tags security
1010
* external/cwe/cwe-208

python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo/TimingAttackAgainstSensitiveInfo.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
* possibly allowing a timing attack to retrieve sensitive information.
55
* @kind path-problem
66
* @problem.severity error
7-
* @precision high
7+
* @precision low
88
* @id py/timing-attack-sensitive-info
99
* @tags security
1010
* external/cwe/cwe-208

0 commit comments

Comments
 (0)