Package · Maven

io.jenkins.plugins:tuleap-oauth

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Low 3.7

CVE-2023-40343

Jenkins Tuleap Authentication Plugin non-constant time token comparison

Jenkins Tuleap Authentication Plugin 1.1.20 and earlier uses a non-constant time comparison function when validating an authentication token allowing attackers to use statistical methods to obtain a valid authentication token.

Jenkins Project Jenkins Tuleap Authentication Plugin io.jenkins.plugins:tuleap-oauth Web / CMS Maven

Aug 16, 2023