Non notée
CVE-2022-23106 Jenkins Configuration as Code Plugin 1.55 and earlier used a non-constant time comparison function when validating an…
Description
Jenkins Configuration as Code Plugin 1.55 and earlier used a non-constant time comparison function when validating an authentication token allowing attackers to use statistical methods to obtain a valid authentication token.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Jenkins Configuration as Code Plugin 1.55 | premières → 1.55 | Pas de correctif indiqué |
| Jenkins Configuration as Code Plugin 1.54 | premières → < 1.54.1 | 1.54.1 |
| Jenkins Configuration as Code Plugin 1.53 | premières → < 1.53.1 | 1.53.1 |
| Jenkins Configuration as Code Plugin 1.47 | premières → < 1.47.1 | 1.47.1 |
Autres CVE de Jenkins Configuration as Code Plugin
Les 7 CVE de Jenkins Configuration as Code Plugin →
CVE-2019-10367
Due to an incomplete fix of CVE-2019-10343, Jenkins Configuration as Code Plugin 1.26 and earlier did not properly apply…
Non notée
CVE-2019-10362
Jenkins Configuration as Code Plugin 1.24 and earlier did not escape values resulting in variable interpolation during…
Non notée
CVE-2019-10344
Missing permission checks in Jenkins Configuration as Code Plugin 1.24 and earlier in various HTTP endpoints allowed…
Non notée
CVE-2019-10363
Jenkins Configuration as Code Plugin 1.24 and earlier did not reliably identify sensitive values expected to be exported…
Non notée