Lucene search
Redhat.comRH:CVE-2020-2101HistoryJan 31, 2020 - 9:09 p.m.
CVE-2020-2101
2020-01-3121:09:11
redhat.com
access.redhat.com
7
EPSS
0.002
Percentile
57.7%
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier did not use a constant-time comparison function for validating connection secrets, which could potentially allow an attacker to use a timing attack to obtain this secret.
Related
cvelist
cvelist
CVE-2020-2101
2020-01-29 15:15:28
cve
cve
CVE-2020-2101
2020-01-29 16:15:12
nvd
nvd
CVE-2020-2101
2020-01-29 16:15:12
osv
osv
CVE-2020-2101
2020-01-29 16:15:12
BIT-jenkins-2020-2101
2024-03-06 11:06:51
Non-constant time comparison of inbound TCP agent connection secret
2022-05-24 17:07:40
github
github
Non-constant time comparison of inbound TCP agent connection secret
2022-05-24 17:07:40
prion
prion
Design/Logic Flaw
2020-01-29 16:15:00
openvas
openvas
Jenkins < 2.219, < 2.204.2 LTS Multiple Vulnerabilities - Windows
2020-02-04 00:00:00
Jenkins < 2.219, < 2.204.2 LTS Multiple Vulnerabilities - Linux
2020-02-04 00:00:00
nessus
nessus
Jenkins < 2.204.2 LTS / 2.219 Multiple Vulnerabilities
2020-02-06 00:00:00
freebsd
freebsd
jenkins -- multiple vulnerabilities
2020-01-29 00:00:00