CVE-2022-23106
Assigner: jenkins
Published: 2022-01-12T00:00:00
State: PUBLISHED
affected: product: Jenkins Configuration as Code Plugin
vendor: Jenkins project
versions: status: unaffected
version: 1.47.1
status: unaffected
version: 1.53.1
status: unaffected
version: 1.54.1
lessThanOrEqual: 1.55
status: affected
version: unspecified
versionType: custom
descriptions: value: Jenkins Configuration as Code Plugin 1.55 and earlier used a non-constant time comparison function when validating an authentication token allowing attackers to use statistical methods to obtain a valid authentication token.