Security Advisory

CVE-2020-2101

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-01-29 15:15:28

Last updated 2024-08-04 07:01:39

Assigner jenkins

CVSS score not scored

State PUBLISHED

Description

Jenkins 2.218 and earlier, LTS 2.204.1 and earlier did not use a constant-time comparison function for validating connection secrets, which could potentially allow an attacker to use a timing attack to obtain this secret.

← Browse all CVEs View on cve.org ↗