Security Advisory

CVE-2023-41935

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-09-06 12:08:55

Last updated 2024-09-26 19:55:15

Assigner jenkins

CVSS score not scored

State PUBLISHED

Description

Jenkins Azure AD Plugin 396.v86ce29279947 and earlier, except 378.380.v545b_1154b_3fb_, uses a non-constant time comparison function when checking whether the provided and expected CSRF protection nonce are equal, potentially allowing attackers to use statistical methods to obtain a valid nonce.

← Browse all CVEs View on cve.org ↗