Lucene search
PRIOn knowledge basePRION:CVE-2023-41936HistorySep 06, 2023 - 1:15 p.m.
Code injection
2023-09-0613:15:00
PRIOn knowledge base
www.prio-n.com
4
jenkins
google login
plugin
vulnerability
non-constant time comparison
code injection
nvd
0.001 Low
EPSS
Percentile
37.2%
Jenkins Google Login Plugin 1.7 and earlier uses a non-constant time comparison function when checking whether the provided and expected token are equal, potentially allowing attackers to use statistical methods to obtain a valid token.
| CPE | Name | Operator | Version |
|---|---|---|---|
| google_login | le | 1.7 |
Related
osv
osv
Jenkins Google Login Plugin non-constant time token comparison
2023-09-06 15:30:26
CVE-2023-41936
2023-09-06 13:15:10
cvelist
cvelist
CVE-2023-41936
2023-09-06 12:08:56
nvd
nvd
CVE-2023-41936
2023-09-06 13:15:10
cve
cve
CVE-2023-41936
2023-09-06 13:15:10
github
github
Jenkins Google Login Plugin non-constant time token comparison
2023-09-06 15:30:26
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2023-09-06)
2023-09-07 00:00:00