CVE-2016-0788

CRITICAL

Jenkins < 1.650 - Remote Code Execution via JRMP Listener

Title source: llm
STIX 2.1

Description

The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener.

References (3)

Core 3
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2016:0711
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2016-1773.html

Scores

CVSS v3 9.8
EPSS 0.3743
EPSS Percentile 97.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-264
Status published
Products (4)
jenkins/jenkins 1.642.1
jenkins/jenkins < 1.649
org.jenkins-ci.main/jenkins-core 1.643 - 1.650Maven
redhat/openshift 3.1
Published Apr 07, 2016
Tracked Since Feb 18, 2026