Lucene search
PRIOn knowledge basePRION:CVE-2023-40343HistoryAug 16, 2023 - 3:15 p.m.
Authentication flaw
2023-08-1615:15:00
PRIOn knowledge base
www.prio-n.com
3
jenkins
tuleap
authentication
plugin
non-constant time comparison
attackers
statistical methods
valid token
0.001 Low
EPSS
Percentile
37.2%
Jenkins Tuleap Authentication Plugin 1.1.20 and earlier uses a non-constant time comparison function when validating an authentication token allowing attackers to use statistical methods to obtain a valid authentication token.
| CPE | Name | Operator | Version |
|---|---|---|---|
| tuleap_authentication | le | 1.1.20 |
Related
osv
osv
Jenkins Tuleap Authentication Plugin non-constant time token comparison
2023-08-16 15:30:18
cvelist
cvelist
CVE-2023-40343
2023-08-16 14:32:53
nvd
nvd
CVE-2023-40343
2023-08-16 15:15:11
github
github
Jenkins Tuleap Authentication Plugin non-constant time token comparison
2023-08-16 15:30:18
cve
cve
CVE-2023-40343
2023-08-16 15:15:11
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2023-08-16)
2023-08-21 00:00:00