Home

CVE-2020-2102

Description

Jenkins 2.218 and earlier, LTS 2.204.1 and earlier used a non-constant time comparison function when validating an HMAC.

Risk Information

Base Score
5.3
MODERATE
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
1.523

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in Jenkins 2.218Windows
Multiple vulnerabilities are fixed in Jenkins-Core 2.204.2Windows
Multiple vulnerabilities are fixed in Jenkins-Core 2.219Windows
Multiple vulnerabilities affected in Jenkins 2.218 (For Ubuntu)Linux
Multiple vulnerabilities affected in Jenkins 2.218 (For Debian)Linux
Multiple vulnerabilities affected in Jenkins 2.218 (For Centos)Linux
Multiple vulnerabilities affected in Jenkins 2.218 (For RedHat)Linux
Multiple vulnerabilities affected in Jenkins 2.218 (For Suse)Linux
Multiple vulnerabilities are fixed in Jenkins-Core for Linux 2.204.2Linux
Multiple vulnerabilities are fixed in Jenkins-Core for Linux 2.219Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234