CVE-2020-2101
Fixed in a distro release EPSS 1%
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier did not use a constant-time comparison function for validating connection secrets, which could potentially allow an attacker to use a timing attack to obtain this secret.
Products: Jenkins project Jenkins
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.jenkins-ci.main:jenkins-core | 2.204.2 |
| Maven | org.jenkins-ci.main:jenkins-core | 2.219 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat:openshift:3.11 | atomic-enterprise-service-catalog | 1:3.11.170-1.git.1.91db82e.el7 |
| Red Hat:openshift:3.11 | atomic-enterprise-service-catalog-svcat | 1:3.11.170-1.git.1.91db82e.el7 |
| Red Hat:openshift:3.11 | atomic-openshift | 0:3.11.170-1.git.0.00cac56.el7 |
| Red Hat:openshift:3.11 | atomic-openshift-clients | 0:3.11.170-1.git.0.00cac56.el7 |
| Red Hat:openshift:3.11 | atomic-openshift-clients-redistributable | 0:3.11.170-1.git.0.00cac56.el7 |
| Red Hat:openshift:3.11 | atomic-openshift-cluster-autoscaler | 0:3.11.170-1.git.1.0a0df6a.el7 |
| Red Hat:openshift:3.11 | atomic-openshift-descheduler | 0:3.11.170-1.git.1.9ad83f2.el7 |
| Red Hat:openshift:3.11 | atomic-openshift-docker-excluder | 0:3.11.170-1.git.0.00cac56.el7 |
| Red Hat:openshift:3.11 | atomic-openshift-dockerregistry | 0:3.11.170-1.git.1.55fab05.el7 |
| Red Hat:openshift:3.11 | atomic-openshift-excluder | 0:3.11.170-1.git.0.00cac56.el7 |
| Red Hat:openshift:3.11 | atomic-openshift-hyperkube | 0:3.11.170-1.git.0.00cac56.el7 |
| Red Hat:openshift:3.11 | atomic-openshift-hypershift | 0:3.11.170-1.git.0.00cac56.el7 |
| Red Hat:openshift:3.11 | atomic-openshift-master | 0:3.11.170-1.git.0.00cac56.el7 |
| Red Hat:openshift:3.11 | atomic-openshift-metrics-server | 0:3.11.170-1.git.1.357f177.el7 |
| Red Hat:openshift:3.11 | atomic-openshift-node | 0:3.11.170-1.git.0.00cac56.el7 |
| Red Hat:openshift:3.11 | atomic-openshift-node-problem-detector | 0:3.11.170-1.git.1.b1f90a6.el7 |
| Red Hat:openshift:3.11 | atomic-openshift-pod | 0:3.11.170-1.git.0.00cac56.el7 |
| Red Hat:openshift:3.11 | atomic-openshift-sdn-ovs | 0:3.11.170-1.git.0.00cac56.el7 |
| Red Hat:openshift:3.11 | atomic-openshift-service-idler | 0:3.11.170-1.git.1.8328979.el7 |
| Red Hat:openshift:3.11 | atomic-openshift-template-service-broker | 0:3.11.170-1.git.0.00cac56.el7 |
| Red Hat:openshift:3.11 | atomic-openshift-tests | 0:3.11.170-1.git.0.00cac56.el7 |
| Red Hat:openshift:3.11 | atomic-openshift-web-console | 0:3.11.170-1.git.1.3d64e8b.el7 |
| Red Hat:openshift:3.11 | cri-o | 0:1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7 |
| Red Hat:openshift:3.11 | cri-o-debuginfo | 0:1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7 |
| Red Hat:openshift:3.11 | golang-github-openshift-oauth-proxy | 0:3.11.170-1.git.1.b49be83.el7 |
| Red Hat:openshift:3.11 | golang-github-prometheus-alertmanager | 0:3.11.170-1.git.1.61d7960.el7 |
| Red Hat:openshift:3.11 | golang-github-prometheus-node_exporter | 0:3.11.170-1.git.1.51473b7.el7 |
| Red Hat:openshift:3.11 | golang-github-prometheus-prometheus | 0:3.11.170-1.git.1.227bc98.el7 |
| Red Hat:openshift:3.11 | jenkins | 0:2.204.2.1580891656-1.el7 |
| Red Hat:openshift:3.11 | jenkins-2-plugins | 0:3.11.1579107288-1.el7 |
| Red Hat:openshift:3.11 | openshift-ansible | 0:3.11.170-2.git.5.8802564.el7 |
| Red Hat:openshift:3.11 | openshift-ansible-docs | 0:3.11.170-2.git.5.8802564.el7 |
| Red Hat:openshift:3.11 | openshift-ansible-playbooks | 0:3.11.170-2.git.5.8802564.el7 |
| Red Hat:openshift:3.11 | openshift-ansible-roles | 0:3.11.170-2.git.5.8802564.el7 |
| Red Hat:openshift:3.11 | openshift-ansible-test | 0:3.11.170-2.git.5.8802564.el7 |
| Red Hat:openshift:3.11 | openshift-enterprise-autoheal | 0:3.11.170-1.git.1.dfe6c52.el7 |
| Red Hat:openshift:3.11 | openshift-enterprise-cluster-capacity | 0:3.11.170-1.git.1.661684b.el7 |
| Red Hat:openshift:3.11 | openshift-kuryr | 0:3.11.170-1.git.1.7265da1.el7 |
| Red Hat:openshift:3.11 | openshift-kuryr-cni | 0:3.11.170-1.git.1.7265da1.el7 |
| Red Hat:openshift:3.11 | openshift-kuryr-common | 0:3.11.170-1.git.1.7265da1.el7 |
| Red Hat:openshift:3.11 | openshift-kuryr-controller | 0:3.11.170-1.git.1.7265da1.el7 |
| Red Hat:openshift:3.11 | prometheus | 0:3.11.170-1.git.1.227bc98.el7 |
| Red Hat:openshift:3.11 | prometheus-alertmanager | 0:3.11.170-1.git.1.61d7960.el7 |
| Red Hat:openshift:3.11 | prometheus-node-exporter | 0:3.11.170-1.git.1.51473b7.el7 |
| Red Hat:openshift:3.11 | python2-kuryr-kubernetes | 0:3.11.170-1.git.1.7265da1.el7 |
| Red Hat:openshift:4.3 | jenkins | 0:2.204.2.1583446818-1.el7 |