CWE-1255
Comparison Logic is Vulnerable to Power Side-Channel Attacks
A device's real time power consumption may be monitored during security token evaluation and the information gleaned may be used to determine the value of the reference token.
Impactr finds and proves whether CWE-1255 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.