Product
The Xen Project has disclosed that the XAPI component, which uses a Pool Secret for authenticating requests between hosts in a pool, performs token comparisons using a data-dependent function.