WP 2FA <= 2.2.1 - Time-Based TOTP attack to Sensitive Information Exposure
Strategic Overview
<= 2.2.1CVE-2022-2891Vulnerability Overview
The WP 2FA plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.2.1 due to the use of a linear-time comparison operator when comparing token hashes. This allows an attacker to gain information about authentication tokens by observing small time differences in server response times. This is a vulnerability that is generally not realistically exploitable over the internet due to other factors that will have a greater influence on response times.
Technical Analysis
REMEDIATION: Update to version 2.3.0, or a newer patched version --- IDENTIFIER: CWE-204 (Observable Response Discrepancy) The product provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor outside of the intended control sphere.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C