io.jenkins:configuration-as-code

1 result · Clear filters · Feed

• Low 3.7
  CVE-2022-23106

  Observable Discrepancy and Observable Timing Discrepancy in Jenkins Configuration as Code Plugin

  Jenkins Configuration as Code Plugin 1.55 and earlier used a non-constant time comparison function when validating an authentication token allowing attackers to use statistical methods to obtain a valid authentication token.

  Jenkins Project Jenkins Configuration as Code Plugin io.jenkins:configuration-as-code Web / CMS Maven
  Jan 12, 2022