Jenkins Google Login Plugin - CVE CyberSecurity Database News

Sep 6, 2023 Exploit Google Jenkins project

CVE-2023-41936: Jenkins Google Login Plugin's Non-Constant Time Comparison Function Exposes Security Vulnerability

CVE-2023-41936 is a security vulnerability affecting the Jenkins Google Login Plugin version 1.7 and earlier. This vulnerability arises from using a non-constant time comparison