Servers and applications
CVE-2020-2102
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier used a non-constant time comparison function when validating an HMAC.
- Severity
- Medium 5.3
- Published
- 29 Jan 2020
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Exploit chance
- 1.4% in the next 30 daysHigher than 72% of CVEs. EPSS by FIRST, 10 Nov 2026
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
JenkinsServers and applications · cpe:a:jenkins:jenkins |
|