Lucene search
PRIOn knowledge basePRION:CVE-2022-36885HistoryJul 27, 2022 - 3:15 p.m.
Code injection
2022-07-2715:15:00
PRIOn knowledge base
www.prio-n.com
6
Jenkins GitHub Plugin 1.34.4 and earlier uses a non-constant time comparison function when checking whether the provided and computed webhook signatures are equal, allowing attackers to use statistical methods to obtain a valid webhook signature.
Related
nvd
nvd
CVE-2022-36885
2022-07-27 15:15:08
redhatcve
redhatcve
CVE-2022-36885
2022-08-19 05:39:20
github
github
Jenkins GitHub plugin uses weak webhook signature function
2022-07-28 00:00:43
veracode
veracode
Information Disclosure
2023-03-07 00:49:21
cvelist
cvelist
CVE-2022-36885
2022-07-27 14:21:38
cve
cve
CVE-2022-36885
2022-07-27 15:15:08
osv
osv
CVE-2022-36885
2022-07-27 15:15:08
Jenkins GitHub plugin uses weak webhook signature function
2022-07-28 00:00:43
nessus
nessus
RHEL 8 : OpenShift Container Platform 4.8.56 (RHSA-2023:0017)
2024-04-28 00:00:00
RHCOS 4 : OpenShift Container Platform 4.8.56 (RHSA-2023:0017)
2024-01-24 00:00:00
RHCOS 4 : OpenShift Container Platform 4.10.51 (RHSA-2023:0560)
2024-01-24 00:00:00
redhat
redhat