Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Jenkins Observable Discrepancy Vulnerability - CVE-2022-34174 - Vulnerability Database
Jenkins

Jenkins Observable Discrepancy Vulnerability - CVE-2022-34174

High
Reference: CVE-2022-34174
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-34174
Title: Jenkins Observable Discrepancy Vulnerability
Overview:

In Jenkins 2.355 and earlier LTS 2.332.3 and earlier an observable timing discrepancy on the login form allows distinguishing between login attempts with an invalid username and login attempts with a valid username and wrong password when using the Jenkins user database security realm.