Aller au contenu
Se connecter
5.3 Moyenne

CVE-2022-43412 Jenkins Generic Webhook Trigger Plugin 1.84.1 and earlier uses a non-constant time comparison function when checking…

Description

Jenkins Generic Webhook Trigger Plugin 1.84.1 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins Generic Webhook Trigger Plugin 1.84 premières → 1.84.1 Pas de correctif indiqué

Autres CVE de Jenkins Generic Webhook Trigger Plugin

Les 3 CVE de Jenkins Generic Webhook Trigger Plugin →
CVE-2022-25185 Jenkins Generic Webhook Trigger Plugin 1.81 and earlier does not escape the build cause when using the webhook,… Non notée CVE-2021-21669 Jenkins Generic Webhook Trigger Plugin 1.72 and earlier does not configure its XML parser to prevent XML external entity… Non notée
Suivre cette CVE