CVE-2023-40343 (published 2023-08-16T14:32:53.909Z)
Jenkins Tuleap Authentication Plugin 1.1.20 and earlier uses a non-constant time comparison function when validating an authentication token allowing attackers to use statistical methods to obtain a valid authentication token.
Affected products: Vendor: Jenkins Project
Product: Jenkins Tuleap Authentication Plugin
Versions: 0