PT-2016-4416

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 1.650 Jenkins LTS versions prior to 1.642.2 Description The issue makes it easier for remote attackers to determine API tokens via a brute-force approach because a constant-time algorithm is not used to verify API...