Jenkins MSTeams Webhook Trigger Plugin 0.1.1 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: jenkins
Published: 2023-10-25T13:45:58.198Z
Updated: 2024-09-12T20:49:52.357Z
Reserved: 2023-10-24T16:05:00.960Z
Link: CVE-2023-46658
Vulnrichment
Updated: 2024-08-02T20:53:20.917Z
NVD
Status : Modified
Published: 2023-10-25T18:17:40.307
Modified: 2024-11-21T08:28:59.877
Link: CVE-2023-46658
Redhat
No data.