CVE-2020-2101
29.01.2020, 16:15
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier did not use a constant-time comparison function for validating connection secrets, which could potentially allow an attacker to use a timing attack to obtain this secret.Enginsight
| Vendor | Product | Version |
|---|---|---|
| jenkins | jenkins | 𝑥 ≤ 2.204.1 |
| jenkins | jenkins | 𝑥 ≤ 2.218 |
𝑥
= Vulnerable software versions
References