CVE-2023-46660

Summary

CVE-2023-46660: Jenkins Zanata Plugin 0.6 and prior versions contain a weakness where token validation is carried out using a non-constant time comparison function. This issue could allow adversaries to employ statistical methods and obtain a valid webhook token through calculated attempts, potentially gaining unauthorized access to Jenkins instances.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.