Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Jenkins Observable Differences in Behavior to Error Inputs Vulnerability - CVE-2020-2102 - Vulnerability Database
Jenkins

Jenkins Observable Differences in Behavior to Error Inputs Vulnerability - CVE-2020-2102

Medium
Reference: CVE-2020-2102
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-2102
Title: Jenkins Observable Differences in Behavior to Error Inputs Vulnerability
Overview:

Jenkins 2.218 and earlier LTS 2.204.1 and earlier used a non-constant time comparison function when validating an HMAC.