CVE-2016-0790

5

MEDIUMCVSS v2

Published

April 7, 2016

Affected

5 projects

Assigned by

Red Hat

Severity scale

010

Description

Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify API tokens, which makes it easier for remote attackers to determine API tokens via a brute-force approach.

jenkinsci/jenkins

GitHubJenkins automation server

<= 1.642.1, <= 1.649NVD

jenkins

Python Package IndexPython ctypes wrapper around Bob Jenkins' hash functions.

<= 1.642.1, <= 1.649NVD

jenkins

NPM

More on this CVE

NVD↗GitHub Advisory↗

Jenkins client

<= 1.642.1, <= 1.649NVD

jenkins

Docker HubDEPRECATED; use "jenkins/jenkins:lts" instead

<= 1.642.1, <= 1.649NVD

jenkins

RubyGemsA suite of utilities for bringing continous integration to your projects (not the other way around) with jenkins CI

<= 1.642.1, <= 1.649NVD

Security Advisories

CVE-2016-0790

Description

More on this CVE