CVE-2016-0790
Exposure of Sensitive Information in Jenkins Core
5.3 MediumFix available
Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify API tokens, which makes it easier for remote attackers to determine API tokens via a brute-force approach.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
2.10%Up 1.0 points since Feb 4, 2022
What each source reports
NVD Score used
Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify API tokens, which makes it easier for remote attackers to determine API tokens via a brute-force approach.
- Record
CVE-2016-0790- CVSS 3.0
- 5.3 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200, CWE-254
- Updated
- 2026-11-02
CVE List No score
Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify API tokens, which makes it easier for remote attackers to determine API tokens via a brute-force approach.
- Record
CVE-2016-0790- Updated
- 2026-11-02
EUVDEUVD-2022-4363 No score
Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify API tokens, which makes it easier for remote attackers to determine API tokens via a brute-force approach.
- Record
EUVD-2022-4363- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jgpr-qrw2-6gp3
Exposure of Sensitive Information in Jenkins Core
Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify API tokens, which makes it easier for remote attackers to determine API tokens via a brute-force approach.
- Record
GHSA-jgpr-qrw2-6gp3- CVSS 3.0
- 5.3 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
OSV
Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify API tokens, which makes it easier for remote attackers to determine API tokens via a brute-force approach.
- Record
CVE-2016-0790- CVSS 3.0
- 5.3 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVGHSA-jgpr-qrw2-6gp3
Exposure of Sensitive Information in Jenkins Core
Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify API tokens, which makes it easier for remote attackers to determine API tokens via a brute-force approach.
- Record
GHSA-jgpr-qrw2-6gp3- CVSS 3.0
- 5.3 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
OSVRHSA-2016:1773
Red Hat Security Advisory: Red Hat OpenShift Enterprise 2.2.10 security, bug fix, and enhancement update
- Record
RHSA-2016:1773- CVSS 3.0
- 4.8 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.jenkins-ci.main:jenkins-coreMaven |
before 1.650 | 1.650 |
org.jenkins-ci.main:jenkins-coreMaven |
before 1.650, plus listed versions 1.3961.3971.3981.3991.400 Show 45 moreShow less1.4011.4031.4041.4051.4061.4071.4081.4091.409.11.409.21.409.31.4101.4111.4121.4131.4141.4151.4161.4171.4181.4191.4201.4211.4221.4231.4241.424.11.424.21.424.31.424.41.424.51.424.61.4251.4261.4271.4281.4291.4301.4311.4321.4331.4341.4351.4361.437 |
1.650 |
jenkinsRed Hat:openshift:3.1::el7 |
before 0:1.642.2-1.el7 | 0:1.642.2-1.el7 |
jenkins-plugin-credentialsRed Hat:openshift:3.1::el7 |
before 0:1.24-2.el7 | 0:1.24-2.el7 |
jenkins-plugin-durable-taskRed Hat:openshift:3.1::el7 |
before 0:1.7-1.el7 | 0:1.7-1.el7 |
jenkins-plugin-kubernetesRed Hat:openshift:3.1::el7 |
before 0:0.5-1.el7 | 0:0.5-1.el7 |
jenkins-plugin-openshift-pipelineRed Hat:openshift:3.1::el7 |
before 0:1.0.9-1.el7 | 0:1.0.9-1.el7 |
rhcRed Hat:openshift:2.0::el6 |
before 0:1.38.7.1-1.el6op | 0:1.38.7.1-1.el6op |
activemqRed Hat:openshift:2.0::el6 |
before 0:5.9.0-6.redhat.611463.el6op | 0:5.9.0-6.redhat.611463.el6op |
activemq-clientRed Hat:openshift:2.0::el6 |
before 0:5.9.0-6.redhat.611463.el6op | 0:5.9.0-6.redhat.611463.el6op |
Show 34 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openshift-origin-brokerRed Hat:openshift:2.0::el6 |
before 0:1.16.3.2-1.el6op | 0:1.16.3.2-1.el6op |
openshift-origin-broker-utilRed Hat:openshift:2.0::el6 |
before 0:1.37.6.2-1.el6op | 0:1.37.6.2-1.el6op |
rubygem-openshift-origin-admin-consoleRed Hat:openshift:2.0::el6 |
before 0:1.28.2.1-1.el6op | 0:1.28.2.1-1.el6op |
rubygem-openshift-origin-controllerRed Hat:openshift:2.0::el6 |
before 0:1.38.6.4-1.el6op | 0:1.38.6.4-1.el6op |
rubygem-openshift-origin-msg-broker-mcollectiveRed Hat:openshift:2.0::el6 |
before 0:1.36.2.4-1.el6op | 0:1.36.2.4-1.el6op |
rubygem-openshift-origin-routing-daemonRed Hat:openshift:2.0::el6 |
before 0:0.26.6.1-1.el6op | 0:0.26.6.1-1.el6op |
openshift-origin-cartridge-jbosseapRed Hat:openshift:2.0::el6 |
before 0:2.27.4.2-1.el6op | 0:2.27.4.2-1.el6op |
ImageMagickRed Hat:openshift:2.0::el6 |
before 0:6.7.2.7-5.el6_8 | 0:6.7.2.7-5.el6_8 |
ImageMagick-debuginfoRed Hat:openshift:2.0::el6 |
before 0:6.7.2.7-5.el6_8 | 0:6.7.2.7-5.el6_8 |
ImageMagick-develRed Hat:openshift:2.0::el6 |
before 0:6.7.2.7-5.el6_8 | 0:6.7.2.7-5.el6_8 |
ImageMagick-docRed Hat:openshift:2.0::el6 |
before 0:6.7.2.7-5.el6_8 | 0:6.7.2.7-5.el6_8 |
ImageMagick-perlRed Hat:openshift:2.0::el6 |
before 0:6.7.2.7-5.el6_8 | 0:6.7.2.7-5.el6_8 |
jenkinsRed Hat:openshift:2.0::el6 |
before 0:1.651.2-1.el6op | 0:1.651.2-1.el6op |
libcgroupRed Hat:openshift:2.0::el6 |
before 0:0.40.rc1-18.el6_8 | 0:0.40.rc1-18.el6_8 |
libcgroup-debuginfoRed Hat:openshift:2.0::el6 |
before 0:0.40.rc1-18.el6_8 | 0:0.40.rc1-18.el6_8 |
libcgroup-pamRed Hat:openshift:2.0::el6 |
before 0:0.40.rc1-18.el6_8 | 0:0.40.rc1-18.el6_8 |
openshift-origin-cartridge-cronRed Hat:openshift:2.0::el6 |
before 0:1.25.4.2-1.el6op | 0:1.25.4.2-1.el6op |
openshift-origin-cartridge-diyRed Hat:openshift:2.0::el6 |
before 0:1.26.2.2-1.el6op | 0:1.26.2.2-1.el6op |
openshift-origin-cartridge-haproxyRed Hat:openshift:2.0::el6 |
before 0:1.31.6.2-1.el6op | 0:1.31.6.2-1.el6op |
openshift-origin-cartridge-jbossewsRed Hat:openshift:2.0::el6 |
before 0:1.35.5.2-1.el6op | 0:1.35.5.2-1.el6op |
openshift-origin-cartridge-jenkinsRed Hat:openshift:2.0::el6 |
before 0:1.29.2.2-1.el6op | 0:1.29.2.2-1.el6op |
openshift-origin-cartridge-jenkins-clientRed Hat:openshift:2.0::el6 |
before 0:1.26.1.1-1.el6op | 0:1.26.1.1-1.el6op |
openshift-origin-cartridge-mongodbRed Hat:openshift:2.0::el6 |
before 0:1.26.2.2-1.el6op | 0:1.26.2.2-1.el6op |
openshift-origin-cartridge-mysqlRed Hat:openshift:2.0::el6 |
before 0:1.31.3.3-1.el6op | 0:1.31.3.3-1.el6op |
openshift-origin-cartridge-nodejsRed Hat:openshift:2.0::el6 |
before 0:1.33.1.2-1.el6op | 0:1.33.1.2-1.el6op |
openshift-origin-cartridge-perlRed Hat:openshift:2.0::el6 |
before 0:1.30.2.2-1.el6op | 0:1.30.2.2-1.el6op |
openshift-origin-cartridge-phpRed Hat:openshift:2.0::el6 |
before 0:1.35.4.2-1.el6op | 0:1.35.4.2-1.el6op |
openshift-origin-cartridge-pythonRed Hat:openshift:2.0::el6 |
before 0:1.34.3.2-1.el6op | 0:1.34.3.2-1.el6op |
openshift-origin-cartridge-rubyRed Hat:openshift:2.0::el6 |
before 0:1.32.2.2-1.el6op | 0:1.32.2.2-1.el6op |
openshift-origin-msg-node-mcollectiveRed Hat:openshift:2.0::el6 |
before 0:1.30.2.2-1.el6op | 0:1.30.2.2-1.el6op |
openshift-origin-node-proxyRed Hat:openshift:2.0::el6 |
before 0:1.26.3.1-1.el6op | 0:1.26.3.1-1.el6op |
openshift-origin-node-utilRed Hat:openshift:2.0::el6 |
before 0:1.38.7.1-1.el6op | 0:1.38.7.1-1.el6op |
rubygem-openshift-origin-frontend-haproxy-sni-proxyRed Hat:openshift:2.0::el6 |
before 0:0.5.2.1-1.el6op | 0:0.5.2.1-1.el6op |
rubygem-openshift-origin-nodeRed Hat:openshift:2.0::el6 |
before 0:1.38.6.4-1.el6op | 0:1.38.6.4-1.el6op |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-0790 is a medium vulnerability (CVSS 5.3) in Jenkins, published April 7, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.10%, the 81st percentile. Fixed in org.jenkins-ci.main:jenkins-core 1.650.
References
access.redhat.com/errata/RHSA-2016:0711
rhn.redhat.com/errata/RHSA-2016-1773.html
wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-02-24
nvd.nist.gov/vuln/detail/CVE-2016-0790
github.com/advisories/GHSA-jgpr-qrw2-6gp3
Show 74 moreShow less
jenkins.io/changelog-stable
bugzilla.redhat.com/show_bug.cgi?id=1311946
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0711.json
cve.org/CVERecord?id=CVE-2016-0788
foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability
This page doesn't list everything
Left out here: 260 versions. The JSON record has them.