CVE-2016-9299 in Jenkins
Resumen (Inglés)
The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized Java object, which triggers an LDAP query to a third-party server.
Reservar
2016-11-14
Divulgación
2017-01-12
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 95273 | Jenkins Remoting escalada de privilegios | 90 | Atacado | Arreglo oficial | CVE-2016-9299 |