Lucene search
+L

1 matches found

RedHat Linux
RedHat Linux
added 2020/03/10 10:10 p.m.8 views

jenkins: Non-constant time comparison of inbound TCP agent connection secret

Jenkins 2.218 and earlier, LTS 2.204.1 and earlier did not use a constant-time comparison function for validating connection secrets, which could potentially allow an attacker to use a timing attack to obtain this secret...

5.3CVSS6AI score0.01368EPSS
SaveExploits0References4
Rows per page
Query Builder