description: Jenkins Tuleap Authentication Plugin 1.1.20 and earlier uses a non-constant time comparison function when validating an authentication token allowing attackers to use statistical methods to obtain a valid authentication token.
affected:
{
defaultStatus: unaffected
product: Jenkins Tuleap Authentication Plugin
vendor: Jenkins Project
versions:
lessThanOrEqual: 1.1.20, status: affected, version: 0, versionType: maven
}