Immunity Canvas: JENKINS_XSTREAM_RCE

Name| jenkinsxstreamrce ---|--- CVE| CVE-2017-2068 Exploit Pack| CANVAS Description| jenkinsxstreamrce Notes| CVE Name: CVE-2017-2068 VENDOR: Jenkins NOTES: XStream-based APIs in Jenkins CI previous to version 2.44 are vulnerable to a remote code execution vulnerability involving the...

CVE-2017-2068

...

CVE-2017-2068

CVE-2017-2068 relates to Jenkins XStream-based APIs that allow remote code execution via deserialization in the javax.imageio package. The vulnerability affects Jenkins versions before 2.44, with specific test cases listed for Ubuntu 16.04/14.04 and various Jenkins/Tomcat/JRE configurations. Auth...