CVE-2022-34174 — Vulnetix

Try Vulnetix Request Demo

CVE-2022-34174 PUBLISHED

In Jenkins 2.355 and earlier, LTS 2.332.3 and earlier, an observable timing discrepancy on the login form allows distinguishing between login attempts with an invalid username, and login attempts with a valid username and wrong password, when using the Jenkins user database security realm.

EPSS 2.03% · 83.7th percentile

Risk Scores

EPSS Score

2.03%

83.7th percentile

Affected Products

Vendor	Product	Versions
Bitnami	jenkins	0
Bitnami	jenkins	0

Timeline

Jun 22, 2022 CVE Published
Jun 23, 2022 EPSS Score
Aug 10, 2022 EPSS Score
Nov 13, 2022 EPSS Score
Dec 30, 2022 EPSS Score
Feb 15, 2023 EPSS Score
Apr 3, 2023 EPSS Score
May 20, 2023 EPSS Score
Jul 7, 2023 EPSS Score
Oct 9, 2023 EPSS Score
Nov 25, 2023 EPSS Score
Jan 11, 2024 EPSS Score

References

Open in Interactive Console →