CVE-2020-2101
EUVD-2022-552629.01.2020, 16:15
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier did not use a constant-time comparison function for validating connection secrets, which could potentially allow an attacker to use a timing attack to obtain this secret.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| jenkins | jenkins | 𝑥 ≤ 2.204.1 |
| jenkins | jenkins | 𝑥 ≤ 2.218 |
𝑥
= Vulnerable software versions
References