logo
DATABASE RESOURCES PRICING ABOUT US

Deserialization of Untrusted Data in Jenkins

Description

Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code execution. An unauthenticated remote code execution vulnerability allowed attackers to transfer a serialized Java `SignedObject` object to the Jenkins CLI, that would be deserialized using a new `ObjectInputStream`, bypassing the existing blacklist-based protection mechanism. We're fixing this issue by adding `SignedObject` to the blacklist. We're also backporting the new HTTP CLI protocol from Jenkins 2.54 to LTS 2.46.2, and deprecating the remoting-based (i.e. Java serialization) CLI protocol, disabling it by default.


Affected Software


CPE Name Name Version
org.jenkins-ci.main:jenkins-core 1.396
org.jenkins-ci.main:jenkins-core 1.397
org.jenkins-ci.main:jenkins-core 1.398
org.jenkins-ci.main:jenkins-core 1.399
org.jenkins-ci.main:jenkins-core 1.400
org.jenkins-ci.main:jenkins-core 1.401
org.jenkins-ci.main:jenkins-core 1.403
org.jenkins-ci.main:jenkins-core 1.404
org.jenkins-ci.main:jenkins-core 1.405
org.jenkins-ci.main:jenkins-core 1.406
org.jenkins-ci.main:jenkins-core 1.407
org.jenkins-ci.main:jenkins-core 1.408
org.jenkins-ci.main:jenkins-core 1.409
org.jenkins-ci.main:jenkins-core 1.409.1
org.jenkins-ci.main:jenkins-core 1.409.2
org.jenkins-ci.main:jenkins-core 1.409.3
org.jenkins-ci.main:jenkins-core 1.410
org.jenkins-ci.main:jenkins-core 1.411
org.jenkins-ci.main:jenkins-core 1.412
org.jenkins-ci.main:jenkins-core 1.413
org.jenkins-ci.main:jenkins-core 1.414
org.jenkins-ci.main:jenkins-core 1.415
org.jenkins-ci.main:jenkins-core 1.416
org.jenkins-ci.main:jenkins-core 1.417
org.jenkins-ci.main:jenkins-core 1.418
org.jenkins-ci.main:jenkins-core 1.419
org.jenkins-ci.main:jenkins-core 1.420
org.jenkins-ci.main:jenkins-core 1.421
org.jenkins-ci.main:jenkins-core 1.422
org.jenkins-ci.main:jenkins-core 1.423
org.jenkins-ci.main:jenkins-core 1.424
org.jenkins-ci.main:jenkins-core 1.424.1
org.jenkins-ci.main:jenkins-core 1.424.2
org.jenkins-ci.main:jenkins-core 1.424.3
org.jenkins-ci.main:jenkins-core 1.424.4
org.jenkins-ci.main:jenkins-core 1.424.5
org.jenkins-ci.main:jenkins-core 1.424.6
org.jenkins-ci.main:jenkins-core 1.425
org.jenkins-ci.main:jenkins-core 1.426
org.jenkins-ci.main:jenkins-core 1.427
org.jenkins-ci.main:jenkins-core 1.428
org.jenkins-ci.main:jenkins-core 1.429
org.jenkins-ci.main:jenkins-core 1.430
org.jenkins-ci.main:jenkins-core 1.431
org.jenkins-ci.main:jenkins-core 1.432
org.jenkins-ci.main:jenkins-core 1.433
org.jenkins-ci.main:jenkins-core 1.434
org.jenkins-ci.main:jenkins-core 1.435
org.jenkins-ci.main:jenkins-core 1.436
org.jenkins-ci.main:jenkins-core 1.437
org.jenkins-ci.main:jenkins-core 1.438
org.jenkins-ci.main:jenkins-core 1.439
org.jenkins-ci.main:jenkins-core 1.440
org.jenkins-ci.main:jenkins-core 1.441
org.jenkins-ci.main:jenkins-core 1.442
org.jenkins-ci.main:jenkins-core 1.443
org.jenkins-ci.main:jenkins-core 1.444
org.jenkins-ci.main:jenkins-core 1.445
org.jenkins-ci.main:jenkins-core 1.446
org.jenkins-ci.main:jenkins-core 1.447
org.jenkins-ci.main:jenkins-core 1.447.1
org.jenkins-ci.main:jenkins-core 1.447.2
org.jenkins-ci.main:jenkins-core 1.448
org.jenkins-ci.main:jenkins-core 1.449
org.jenkins-ci.main:jenkins-core 1.450
org.jenkins-ci.main:jenkins-core 1.451
org.jenkins-ci.main:jenkins-core 1.452
org.jenkins-ci.main:jenkins-core 1.453
org.jenkins-ci.main:jenkins-core 1.454
org.jenkins-ci.main:jenkins-core 1.455
org.jenkins-ci.main:jenkins-core 1.456
org.jenkins-ci.main:jenkins-core 1.457
org.jenkins-ci.main:jenkins-core 1.458
org.jenkins-ci.main:jenkins-core 1.459
org.jenkins-ci.main:jenkins-core 1.460
org.jenkins-ci.main:jenkins-core 1.461
org.jenkins-ci.main:jenkins-core 1.462
org.jenkins-ci.main:jenkins-core 1.463
org.jenkins-ci.main:jenkins-core 1.464
org.jenkins-ci.main:jenkins-core 1.465
org.jenkins-ci.main:jenkins-core 1.466
org.jenkins-ci.main:jenkins-core 1.466.1
org.jenkins-ci.main:jenkins-core 1.466.2
org.jenkins-ci.main:jenkins-core 1.467
org.jenkins-ci.main:jenkins-core 1.468
org.jenkins-ci.main:jenkins-core 1.469
org.jenkins-ci.main:jenkins-core 1.470
org.jenkins-ci.main:jenkins-core 1.471
org.jenkins-ci.main:jenkins-core 1.472
org.jenkins-ci.main:jenkins-core 1.473
org.jenkins-ci.main:jenkins-core 1.474
org.jenkins-ci.main:jenkins-core 1.475
org.jenkins-ci.main:jenkins-core 1.476
org.jenkins-ci.main:jenkins-core 1.477
org.jenkins-ci.main:jenkins-core 1.478
org.jenkins-ci.main:jenkins-core 1.479
org.jenkins-ci.main:jenkins-core 1.480
org.jenkins-ci.main:jenkins-core 1.480.1
org.jenkins-ci.main:jenkins-core 1.480.2
org.jenkins-ci.main:jenkins-core 1.480.3
org.jenkins-ci.main:jenkins-core 1.481
org.jenkins-ci.main:jenkins-core 1.482
org.jenkins-ci.main:jenkins-core 1.483
org.jenkins-ci.main:jenkins-core 1.484
org.jenkins-ci.main:jenkins-core 1.485
org.jenkins-ci.main:jenkins-core 1.486
org.jenkins-ci.main:jenkins-core 1.487
org.jenkins-ci.main:jenkins-core 1.488
org.jenkins-ci.main:jenkins-core 1.489
org.jenkins-ci.main:jenkins-core 1.490
org.jenkins-ci.main:jenkins-core 1.491
org.jenkins-ci.main:jenkins-core 1.492
org.jenkins-ci.main:jenkins-core 1.493
org.jenkins-ci.main:jenkins-core 1.494
org.jenkins-ci.main:jenkins-core 1.495
org.jenkins-ci.main:jenkins-core 1.496
org.jenkins-ci.main:jenkins-core 1.497
org.jenkins-ci.main:jenkins-core 1.498
org.jenkins-ci.main:jenkins-core 1.499
org.jenkins-ci.main:jenkins-core 1.500
org.jenkins-ci.main:jenkins-core 1.501
org.jenkins-ci.main:jenkins-core 1.502
org.jenkins-ci.main:jenkins-core 1.503
org.jenkins-ci.main:jenkins-core 1.504
org.jenkins-ci.main:jenkins-core 1.505
org.jenkins-ci.main:jenkins-core 1.506
org.jenkins-ci.main:jenkins-core 1.507
org.jenkins-ci.main:jenkins-core 1.508
org.jenkins-ci.main:jenkins-core 1.509
org.jenkins-ci.main:jenkins-core 1.509.1
org.jenkins-ci.main:jenkins-core 1.509.2
org.jenkins-ci.main:jenkins-core 1.509.2.JENKINS-14362-jzlib
org.jenkins-ci.main:jenkins-core 1.509.2.JENKINS-8856-diag
org.jenkins-ci.main:jenkins-core 1.509.3
org.jenkins-ci.main:jenkins-core 1.509.3.JENKINS-14362-jzlib
org.jenkins-ci.main:jenkins-core 1.509.4
org.jenkins-ci.main:jenkins-core 1.510
org.jenkins-ci.main:jenkins-core 1.511
org.jenkins-ci.main:jenkins-core 1.512
org.jenkins-ci.main:jenkins-core 1.513
org.jenkins-ci.main:jenkins-core 1.514
org.jenkins-ci.main:jenkins-core 1.515
org.jenkins-ci.main:jenkins-core 1.516
org.jenkins-ci.main:jenkins-core 1.516.JENKINS-14362-jzlib
org.jenkins-ci.main:jenkins-core 1.517
org.jenkins-ci.main:jenkins-core 1.518
org.jenkins-ci.main:jenkins-core 1.518.JENKINS-14362-jzlib
org.jenkins-ci.main:jenkins-core 1.519
org.jenkins-ci.main:jenkins-core 1.520
org.jenkins-ci.main:jenkins-core 1.521
org.jenkins-ci.main:jenkins-core 1.522
org.jenkins-ci.main:jenkins-core 1.523
org.jenkins-ci.main:jenkins-core 1.524
org.jenkins-ci.main:jenkins-core 1.525
org.jenkins-ci.main:jenkins-core 1.526
org.jenkins-ci.main:jenkins-core 1.527
org.jenkins-ci.main:jenkins-core 1.528
org.jenkins-ci.main:jenkins-core 1.529
org.jenkins-ci.main:jenkins-core 1.530
org.jenkins-ci.main:jenkins-core 1.531
org.jenkins-ci.main:jenkins-core 1.532
org.jenkins-ci.main:jenkins-core 1.532.1
org.jenkins-ci.main:jenkins-core 1.532.1.JENKINS-19453
org.jenkins-ci.main:jenkins-core 1.532.2
org.jenkins-ci.main:jenkins-core 1.532.2.JENKINS-21622-diag
org.jenkins-ci.main:jenkins-core 1.532.2.JENKINS-22395-diag
org.jenkins-ci.main:jenkins-core 1.532.3
org.jenkins-ci.main:jenkins-core 1.532.3.JENKINS-22395
org.jenkins-ci.main:jenkins-core 1.532.3.JENKINS-22395-2
org.jenkins-ci.main:jenkins-core 1.533
org.jenkins-ci.main:jenkins-core 1.534
org.jenkins-ci.main:jenkins-core 1.535
org.jenkins-ci.main:jenkins-core 1.536
org.jenkins-ci.main:jenkins-core 1.537
org.jenkins-ci.main:jenkins-core 1.538
org.jenkins-ci.main:jenkins-core 1.539
org.jenkins-ci.main:jenkins-core 1.540
org.jenkins-ci.main:jenkins-core 1.541
org.jenkins-ci.main:jenkins-core 1.542
org.jenkins-ci.main:jenkins-core 1.543
org.jenkins-ci.main:jenkins-core 1.544
org.jenkins-ci.main:jenkins-core 1.545
org.jenkins-ci.main:jenkins-core 1.546
org.jenkins-ci.main:jenkins-core 1.547
org.jenkins-ci.main:jenkins-core 1.548
org.jenkins-ci.main:jenkins-core 1.549
org.jenkins-ci.main:jenkins-core 1.550
org.jenkins-ci.main:jenkins-core 1.551
org.jenkins-ci.main:jenkins-core 1.552
org.jenkins-ci.main:jenkins-core 1.553
org.jenkins-ci.main:jenkins-core 1.554
org.jenkins-ci.main:jenkins-core 1.554.1
org.jenkins-ci.main:jenkins-core 1.554.2
org.jenkins-ci.main:jenkins-core 1.554.3
org.jenkins-ci.main:jenkins-core 1.554.3.JENKINS-18065-ALLRM-all
org.jenkins-ci.main:jenkins-core 1.554.3.JENKINS-18065-JENKINS-23945
org.jenkins-ci.main:jenkins-core 1.555
org.jenkins-ci.main:jenkins-core 1.556
org.jenkins-ci.main:jenkins-core 1.557
org.jenkins-ci.main:jenkins-core 1.558
org.jenkins-ci.main:jenkins-core 1.559
org.jenkins-ci.main:jenkins-core 1.560
org.jenkins-ci.main:jenkins-core 1.561
org.jenkins-ci.main:jenkins-core 1.562
org.jenkins-ci.main:jenkins-core 1.563
org.jenkins-ci.main:jenkins-core 1.564
org.jenkins-ci.main:jenkins-core 1.565
org.jenkins-ci.main:jenkins-core 1.565.1
org.jenkins-ci.main:jenkins-core 1.565.1.JENKINS-22395-dropLinks
org.jenkins-ci.main:jenkins-core 1.565.2
org.jenkins-ci.main:jenkins-core 1.565.3
org.jenkins-ci.main:jenkins-core 1.566
org.jenkins-ci.main:jenkins-core 1.567
org.jenkins-ci.main:jenkins-core 1.568
org.jenkins-ci.main:jenkins-core 1.569
org.jenkins-ci.main:jenkins-core 1.570
org.jenkins-ci.main:jenkins-core 1.571
org.jenkins-ci.main:jenkins-core 1.572
org.jenkins-ci.main:jenkins-core 1.573
org.jenkins-ci.main:jenkins-core 1.574
org.jenkins-ci.main:jenkins-core 1.575
org.jenkins-ci.main:jenkins-core 1.576
org.jenkins-ci.main:jenkins-core 1.577
org.jenkins-ci.main:jenkins-core 1.578
org.jenkins-ci.main:jenkins-core 1.579
org.jenkins-ci.main:jenkins-core 1.580
org.jenkins-ci.main:jenkins-core 1.580.1
org.jenkins-ci.main:jenkins-core 1.580.2
org.jenkins-ci.main:jenkins-core 1.580.3
org.jenkins-ci.main:jenkins-core 1.581
org.jenkins-ci.main:jenkins-core 1.582
org.jenkins-ci.main:jenkins-core 1.583
org.jenkins-ci.main:jenkins-core 1.584
org.jenkins-ci.main:jenkins-core 1.585
org.jenkins-ci.main:jenkins-core 1.586
org.jenkins-ci.main:jenkins-core 1.587
org.jenkins-ci.main:jenkins-core 1.588
org.jenkins-ci.main:jenkins-core 1.589
org.jenkins-ci.main:jenkins-core 1.590
org.jenkins-ci.main:jenkins-core 1.591
org.jenkins-ci.main:jenkins-core 1.592
org.jenkins-ci.main:jenkins-core 1.593
org.jenkins-ci.main:jenkins-core 1.594
org.jenkins-ci.main:jenkins-core 1.595
org.jenkins-ci.main:jenkins-core 1.596
org.jenkins-ci.main:jenkins-core 1.596.1
org.jenkins-ci.main:jenkins-core 1.596.2
org.jenkins-ci.main:jenkins-core 1.596.3
org.jenkins-ci.main:jenkins-core 1.597
org.jenkins-ci.main:jenkins-core 1.598
org.jenkins-ci.main:jenkins-core 1.599
org.jenkins-ci.main:jenkins-core 1.600
org.jenkins-ci.main:jenkins-core 1.601
org.jenkins-ci.main:jenkins-core 1.602
org.jenkins-ci.main:jenkins-core 1.604
org.jenkins-ci.main:jenkins-core 1.605
org.jenkins-ci.main:jenkins-core 1.606
org.jenkins-ci.main:jenkins-core 1.607
org.jenkins-ci.main:jenkins-core 1.608
org.jenkins-ci.main:jenkins-core 1.609
org.jenkins-ci.main:jenkins-core 1.609.1
org.jenkins-ci.main:jenkins-core 1.609.2
org.jenkins-ci.main:jenkins-core 1.609.3
org.jenkins-ci.main:jenkins-core 1.610
org.jenkins-ci.main:jenkins-core 1.611
org.jenkins-ci.main:jenkins-core 1.612
org.jenkins-ci.main:jenkins-core 1.613
org.jenkins-ci.main:jenkins-core 1.614
org.jenkins-ci.main:jenkins-core 1.615
org.jenkins-ci.main:jenkins-core 1.616
org.jenkins-ci.main:jenkins-core 1.617
org.jenkins-ci.main:jenkins-core 1.618
org.jenkins-ci.main:jenkins-core 1.619
org.jenkins-ci.main:jenkins-core 1.620
org.jenkins-ci.main:jenkins-core 1.621
org.jenkins-ci.main:jenkins-core 1.622
org.jenkins-ci.main:jenkins-core 1.623
org.jenkins-ci.main:jenkins-core 1.624
org.jenkins-ci.main:jenkins-core 1.625
org.jenkins-ci.main:jenkins-core 1.625.1
org.jenkins-ci.main:jenkins-core 1.625.2
org.jenkins-ci.main:jenkins-core 1.625.3
org.jenkins-ci.main:jenkins-core 1.626
org.jenkins-ci.main:jenkins-core 1.627
org.jenkins-ci.main:jenkins-core 1.628
org.jenkins-ci.main:jenkins-core 1.629
org.jenkins-ci.main:jenkins-core 1.630
org.jenkins-ci.main:jenkins-core 1.631
org.jenkins-ci.main:jenkins-core 1.632
org.jenkins-ci.main:jenkins-core 1.633
org.jenkins-ci.main:jenkins-core 1.634
org.jenkins-ci.main:jenkins-core 1.635
org.jenkins-ci.main:jenkins-core 1.636
org.jenkins-ci.main:jenkins-core 1.637
org.jenkins-ci.main:jenkins-core 1.638
org.jenkins-ci.main:jenkins-core 1.639
org.jenkins-ci.main:jenkins-core 1.640
org.jenkins-ci.main:jenkins-core 1.641
org.jenkins-ci.main:jenkins-core 1.642
org.jenkins-ci.main:jenkins-core 1.642.1
org.jenkins-ci.main:jenkins-core 1.642.2
org.jenkins-ci.main:jenkins-core 1.642.3
org.jenkins-ci.main:jenkins-core 1.642.4
org.jenkins-ci.main:jenkins-core 1.643
org.jenkins-ci.main:jenkins-core 1.644
org.jenkins-ci.main:jenkins-core 1.645
org.jenkins-ci.main:jenkins-core 1.646
org.jenkins-ci.main:jenkins-core 1.647
org.jenkins-ci.main:jenkins-core 1.648
org.jenkins-ci.main:jenkins-core 1.649
org.jenkins-ci.main:jenkins-core 1.650
org.jenkins-ci.main:jenkins-core 1.651
org.jenkins-ci.main:jenkins-core 1.651.1
org.jenkins-ci.main:jenkins-core 1.651.2
org.jenkins-ci.main:jenkins-core 1.651.3
org.jenkins-ci.main:jenkins-core 1.652
org.jenkins-ci.main:jenkins-core 1.653
org.jenkins-ci.main:jenkins-core 1.654
org.jenkins-ci.main:jenkins-core 1.655
org.jenkins-ci.main:jenkins-core 1.656
org.jenkins-ci.main:jenkins-core 1.657
org.jenkins-ci.main:jenkins-core 1.658
org.jenkins-ci.main:jenkins-core 2.0
org.jenkins-ci.main:jenkins-core 2.0-alpha-1
org.jenkins-ci.main:jenkins-core 2.0-alpha-2
org.jenkins-ci.main:jenkins-core 2.0-alpha-3
org.jenkins-ci.main:jenkins-core 2.0-alpha-4
org.jenkins-ci.main:jenkins-core 2.0-beta-1
org.jenkins-ci.main:jenkins-core 2.0-beta-2
org.jenkins-ci.main:jenkins-core 2.0-rc-1
org.jenkins-ci.main:jenkins-core 2.1
org.jenkins-ci.main:jenkins-core 2.10
org.jenkins-ci.main:jenkins-core 2.11
org.jenkins-ci.main:jenkins-core 2.12
org.jenkins-ci.main:jenkins-core 2.13
org.jenkins-ci.main:jenkins-core 2.14
org.jenkins-ci.main:jenkins-core 2.15
org.jenkins-ci.main:jenkins-core 2.16
org.jenkins-ci.main:jenkins-core 2.17
org.jenkins-ci.main:jenkins-core 2.18
org.jenkins-ci.main:jenkins-core 2.19
org.jenkins-ci.main:jenkins-core 2.19.1
org.jenkins-ci.main:jenkins-core 2.19.2
org.jenkins-ci.main:jenkins-core 2.19.3
org.jenkins-ci.main:jenkins-core 2.19.4
org.jenkins-ci.main:jenkins-core 2.2
org.jenkins-ci.main:jenkins-core 2.20
org.jenkins-ci.main:jenkins-core 2.21
org.jenkins-ci.main:jenkins-core 2.22
org.jenkins-ci.main:jenkins-core 2.23
org.jenkins-ci.main:jenkins-core 2.24
org.jenkins-ci.main:jenkins-core 2.25
org.jenkins-ci.main:jenkins-core 2.26
org.jenkins-ci.main:jenkins-core 2.27
org.jenkins-ci.main:jenkins-core 2.28
org.jenkins-ci.main:jenkins-core 2.29
org.jenkins-ci.main:jenkins-core 2.3
org.jenkins-ci.main:jenkins-core 2.30
org.jenkins-ci.main:jenkins-core 2.31
org.jenkins-ci.main:jenkins-core 2.32
org.jenkins-ci.main:jenkins-core 2.32.1
org.jenkins-ci.main:jenkins-core 2.32.2
org.jenkins-ci.main:jenkins-core 2.32.3
org.jenkins-ci.main:jenkins-core 2.33
org.jenkins-ci.main:jenkins-core 2.34
org.jenkins-ci.main:jenkins-core 2.35
org.jenkins-ci.main:jenkins-core 2.36
org.jenkins-ci.main:jenkins-core 2.37
org.jenkins-ci.main:jenkins-core 2.38
org.jenkins-ci.main:jenkins-core 2.39
org.jenkins-ci.main:jenkins-core 2.4
org.jenkins-ci.main:jenkins-core 2.40
org.jenkins-ci.main:jenkins-core 2.41
org.jenkins-ci.main:jenkins-core 2.42
org.jenkins-ci.main:jenkins-core 2.43
org.jenkins-ci.main:jenkins-core 2.44
org.jenkins-ci.main:jenkins-core 2.45
org.jenkins-ci.main:jenkins-core 2.46
org.jenkins-ci.main:jenkins-core 2.46.1
org.jenkins-ci.main:jenkins-core 2.5
org.jenkins-ci.main:jenkins-core 2.6
org.jenkins-ci.main:jenkins-core 2.7
org.jenkins-ci.main:jenkins-core 2.7.1
org.jenkins-ci.main:jenkins-core 2.7.2
org.jenkins-ci.main:jenkins-core 2.7.3
org.jenkins-ci.main:jenkins-core 2.7.4
org.jenkins-ci.main:jenkins-core 2.8
org.jenkins-ci.main:jenkins-core 2.9

Related