Lucene search
GoogleOSV:CVE-2020-2101HistoryJan 29, 2020 - 4:15 p.m.
CVE-2020-2101
2020-01-2916:15:12
Google
osv.dev
6
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier did not use a constant-time comparison function for validating connection secrets, which could potentially allow an attacker to use a timing attack to obtain this secret.
Related
cvelist
cvelist
CVE-2020-2101
2020-01-29 15:15:28
osv
osv
Non-constant time comparison of inbound TCP agent connection secret
2022-05-24 17:07:40
BIT-jenkins-2020-2101
2024-03-06 11:06:51
redhatcve
redhatcve
CVE-2020-2101
2020-01-31 21:09:11
prion
prion
Design/Logic Flaw
2020-01-29 16:15:00
github
github
Non-constant time comparison of inbound TCP agent connection secret
2022-05-24 17:07:40
nvd
nvd
CVE-2020-2101
2020-01-29 16:15:12
cve
cve
CVE-2020-2101
2020-01-29 16:15:12
openvas
openvas
Jenkins < 2.219, < 2.204.2 LTS Multiple Vulnerabilities - Windows
2020-02-04 00:00:00
Jenkins < 2.219, < 2.204.2 LTS Multiple Vulnerabilities - Linux
2020-02-04 00:00:00
nessus
nessus
Jenkins < 2.204.2 LTS / 2.219 Multiple Vulnerabilities
2020-02-06 00:00:00
freebsd
freebsd
jenkins -- multiple vulnerabilities
2020-01-29 00:00:00