Back to search
CVE-2016-9299
Published: Jan 12, 2017
Modified: Aug 6, 2024
PUBLISHED
Description
The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized Java object, which triggers an LDAP query to a third-party server.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
44642
exploit
x_refsource_EXPLOIT-DB
[oss-security] 20161113 CVE request: Jenkins remote code execution vulnerability
mailing-list
x_refsource_MLIST
94281
vdb-entry
x_refsource_BID
[jenkinsci-advisories] 20161111 Re: Unauthenticated remote code execution vulnerability in Jenkins
mailing-list
x_refsource_MLIST
FEDORA-2016-368780879d
vendor-advisory
x_refsource_FEDORA
[jenkinsci-advisories] 20161111 Unauthenticated remote code execution vulnerability in Jenkins
mailing-list
x_refsource_MLIST
https://www.cloudbees.com/jenkins-security-advisory-2016-11-16
x_refsource_CONFIRM
[oss-security] 20161114 Re: CVE request: Jenkins remote code execution vulnerability
mailing-list
x_refsource_MLIST
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now