Jenkins Google Login Plugin 1.7 and earlier uses a non-constant time comparison function when checking whether the provided and expected token are equal, potentially allowing attackers to use statistical methods to obtain a valid token.
Metrics
Affected Vendors & Products
References
History
Thu, 26 Sep 2024 20:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: jenkins
Published: 2023-09-06T12:08:56.365Z
Updated: 2024-09-26T19:54:41.046Z
Reserved: 2023-09-05T16:39:57.392Z
Link: CVE-2023-41936
Vulnrichment
Updated: 2024-08-02T19:09:49.355Z
NVD
Status : Modified
Published: 2023-09-06T13:15:10.367
Modified: 2024-11-21T08:21:57.297
Link: CVE-2023-41936
Redhat
No data.