ID CVE-2022-23106
Summary Jenkins Configuration as Code Plugin 1.55 and earlier used a non-constant time comparison function when validating an authentication token allowing attackers to use statistical methods to obtain a valid authentication token.
References
Vulnerable Configurations
  • cpe:2.3:a:jenkins:configuration_as_code:0.1:alpha:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:0.1:alpha:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:0.2:alpha:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:0.2:alpha:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:0.3:alpha:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:0.3:alpha:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:0.4:alpha:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:0.4:alpha:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:0.5:alpha:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:0.5:alpha:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:0.6:alpha:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:0.6:alpha:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:0.7:alpha:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:0.7:alpha:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:0.8:alpha:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:0.8:alpha:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:0.9:alpha:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:0.9:alpha:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:0.10:alpha:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:0.10:alpha:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:0.11:alpha:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:0.11:alpha:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.0:-:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.0:-:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.0:rc1:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.0:rc1:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.0:rc2:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.0:rc2:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.0:rc3:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.0:rc3:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.1:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.1:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.2:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.2:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.3:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.3:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.4:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.4:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.5:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.5:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.6:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.6:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.7:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.7:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.8:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.8:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.9:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.9:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.10:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.10:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.11:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.11:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.12:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.12:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.13:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.13:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.17:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.17:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.18:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.18:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.19:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.19:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.20:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.20:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.21:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.21:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.22:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.22:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.23:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.23:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.23.1:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.23.1:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.24:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.24:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.25:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.25:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.26:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.26:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.27:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.27:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.28:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.28:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.29:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.29:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.30:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.30:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.31:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.31:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.32:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.32:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.33:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.33:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.34:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.34:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.35:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.35:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.36:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.36:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.36.2:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.36.2:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.38:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.38:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.39:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.39:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.40:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.40:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.41:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.41:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.42:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.42:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.43:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.43:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.44:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.44:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.45:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.45:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.46:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.46:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.47:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.47:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.47.1:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.47.1:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.48:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.48:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.49:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.49:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.50:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.50:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.51:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.51:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.52:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.52:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.53:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.53:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.53.1:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.53.1:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.54:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.54:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.54.1:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.54.1:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:configuration_as_code:1.55:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:configuration_as_code:1.55:*:*:*:*:jenkins:*:*
CVSS
Base: 5.0 (as of 25-10-2023 - 18:16)
Impact:
Exploitability:
CWE CWE-203
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:N/A:N
Last major update 25-10-2023 - 18:16
Published 12-01-2022 - 20:15
Last modified 25-10-2023 - 18:16
Back to Top