VDB
CVE-2022-34174
CVE-2022-34174
PUBLISHED
In Jenkins 2.355 and earlier, LTS 2.332.3 and earlier, an observable timing discrepancy on the login form allows distinguishing between login attempts with an invalid username, and login attempts with a valid username and wrong password, when using the Jenkins user database security realm.
EPSS 0.55% · 68.4th percentile
Risk Scores
EPSS Score
0.55%
68.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | jenkins | 0 |
| Bitnami | jenkins | 0 |
Exploit Intelligence
- CIRCL seen: CVE-2022-34174 (circl-sighting)
- https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2566 (circl)
Timeline
- Jun 22, 2022 CVE Published
- Jun 23, 2022 EPSS Score
- Aug 11, 2022 EPSS Score
- Nov 14, 2022 EPSS Score
- Jan 1, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 7, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Aug 28, 2023 EPSS Score
- Oct 15, 2023 EPSS Score
- Dec 2, 2023 EPSS Score
- Mar 6, 2024 EPSS Score