description: Jenkins Configuration as Code Plugin 1.55 and earlier used a non-constant time comparison function when validating an authentication token allowing attackers to use statistical methods to obtain a valid authentication token.
affected:
{
product: Jenkins Configuration as Code Plugin
vendor: Jenkins project
versions:
status: unaffected, version: 1.47.1
status: unaffected, version: 1.53.1
status: unaffected, version: 1.54.1
lessThanOrEqual: 1.55, status: affected, version: unspecified, versionType: custom
}