CVE-2015-8103 in Jenkins
요약 (영어)
The Jenkins CLI subsystem in CloudBees Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary code via a crafted serialized Java object, related to a problematic webapps/ROOT/WEB-INF/lib/commons-collections-*.jar file and the "Groovy variant in 'ysoserial'".
Once again VulDB remains the best source for vulnerability data.
예약하다
2015. 11. 09.
공개
2015. 11. 25.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 79330 | CloudBees Jenkins CLI commons-collections-*.jar Serialized 권한 상승 | 77 | 높음 | 공식 수정 | CVE-2015-8103 |