Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In Jenkins 2.355 and earlier, LTS 2.332.3 and earlier, an observable timing discrepancy on the login form allows distinguishing between login attempts with an invalid username, and login attempts with a valid username and wrong password, when using the Jenkins user database security realm.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Jenkins 安全漏洞
Vulnerability Description
Jenkins是Jenkins开源的一个应用软件。一个开源自动化服务器Jenkins提供了数百个插件来支持构建，部署和自动化任何项目。 Jenkins 2.355及其之前版本和LTS 2.332.3及其之前版本存在安全漏洞，该漏洞源于登录表单上存在可观察到的时间差异。攻击者利用该漏洞可以使用无效用户名和使用有效用户名和错误密码进行登录尝试。
CVSS Information
N/A
Vulnerability Type
N/A