Security Advisory
CVE-2022-23106
5.3
MEDIUM
Vulnerability Description
Jenkins Configuration as Code Plugin 1.55 and earlier used a non-constant time comparison function when validating an authentication token allowing attackers to use statistical methods to obtain a valid authentication token.
Published Date
January 12, 2022
Official Source
NIST NVD Advisory