CVE-2016-0790

Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify API tokens, which makes it easier for remote attackers to determine…

published April 7, 2016

CVSS
—
EPSS
2%
Percentile
81.5
In the wild
Unconfirmed
What it is

Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify API tokens, which makes it easier for remote attackers to determine API tokens via a brute-force approach.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02105 · 81.5th percentile
Published
2016-04-07T23:00Z
EPSS history
Timeline
  • 07 APR 23:00Z
    Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify API tokens, which makes it easier for remote attackers to determine…
    cvelistv5