Veille CVE
Recherche « Jenkins Project Jenkins Webhook Secret Credentials Provider Plugin »
1 CVE
Critique 0
Élevée 0
Moyenne 0
Faible 1
Non évaluée 0
Exploitées (KEV)
Tri : plus récentes
« Jenkins Project Jenkins Webhook Secret Credentials Provider Plugin » ✕
-
CVE-2026-70437 3.7 Faible
Jenkins Project Jenkins Webhook Secret Credentials Provider Plugin
Jenkins Webhook Secret Credentials Provider Plugin 16.v0cfa_f0215cf5 and earlier does not use a constant-time comparison function when checking whether the provided and expected webhook bearer token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook bearer token.