Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Daguej

#51753of 56,330
5Total CVSS
Vulnerabilities · 1
PT-2018-4551
5.0
2018-05-31
Unknown · Secure-Compare · CVE-2015-9238
**Name of the Vulnerable Software and Affected Versions** secure-compare versions prior to 3.0.1 **Description** The issue arises from the `secure-compare` function comparing the first argument with itself instead of comparing two different strings. This results in the function always returning true when comparing two strings of the same length, regardless of their actual contents. **Recommendations** For versions prior to 3.0.1, upgrade to version 3.0.1 or later.