Security Advisory

CVE-2022-23106

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-01-12 00:00:00

Last updated 2024-08-03 03:36:19

Assigner jenkins

State PUBLISHED

Description

Jenkins Configuration as Code Plugin 1.55 and earlier used a non-constant time comparison function when validating an authentication token allowing attackers to use statistical methods to obtain a valid authentication token.

← Browse all CVEs View on cve.org ↗