漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
On Demand Services SDK Timing Attack Vulnerability
Vulnerability Description
Pivotal Cloud Foundry On Demand Services SDK, versions prior to 0.24 contain an insecure method of verifying credentials. A remote unauthenticated malicious user may make many requests to the service broker with different credentials, allowing them to infer valid credentials and gain access to perform broker operations.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Pivotal Cloud Foundry On Demand Services SDK 安全漏洞
Vulnerability Description
Pivotal Cloud Foundry On Demand Services SDK是美国Pivotal Software公司的一款为Golang中的Cloud Foundry按需服务代理（ODB）构建服务适配器的SDK（软件开发工具包）。 Pivotal Cloud Foundry On Demand Services SDK 0.24之前版本中存在安全漏洞，该漏洞源于程序使用了不安全的方法来验证凭证。远程攻击者可利用该漏洞推测出有效的凭证并对代理执行操作。
CVSS Information
N/A
Vulnerability Type
N/A