Lucene search

K
freebsdFreeBSD27EEE66D-9474-44A5-B830-21EC12A1C307
HistoryNov 11, 2016 - 12:00 a.m.

jenkins -- Remote code execution vulnerability in remoting module

2016-11-1100:00:00
vuxml.freebsd.org
74

0.633 Medium

EPSS

Percentile

97.8%

Jenkins Security Advisory:

An unauthenticated remote code execution vulnerability allowed
attackers to transfer a serialized Java object to the Jenkins CLI,
making Jenkins connect to an attacker-controlled LDAP server, which
in turn can send a serialized payload leading to code execution,
bypassing existing protection mechanisms.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchjenkins<= 2.31UNKNOWN
FreeBSDanynoarchjenkins-lts<= 2.19.2UNKNOWN