Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2016-0791
Description:Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify CSRF tokens, which makes it easier for remote attackers to bypass a CSRF protection mechanism via a brute-force approach.
Test IDs: None available
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2016-0791
RedHat Security Advisories: RHSA-2016:0711
https://access.redhat.com/errata/RHSA-2016:0711
RedHat Security Advisories: RHSA-2016:1773
http://rhn.redhat.com/errata/RHSA-2016-1773.html




© 1998-2025 E-Soft Inc. All rights reserved.