Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Jenkins Observable Discrepancy Vulnerability - CVE-2022-34174 - Vulnerability Database
Jenkins

Jenkins Observable Discrepancy Vulnerability - CVE-2022-34174

High
Reference: CVE-2022-34174
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-34174
Title: Jenkins Observable Discrepancy Vulnerability
Overview:

In Jenkins 2.355 and earlier LTS 2.332.3 and earlier an observable timing discrepancy on the login form allows distinguishing between login attempts with an invalid username and login attempts with a valid username and wrong password when using the Jenkins user database security realm.