Description

The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener.

Remediation

References

CVE-2016-0788

Related Vulnerabilities

MySQL CVE-2020-14697 Vulnerability (CVE-2020-14697)

WordPress Plugin Klaviyo Cross-Site Scripting (3.0.7)

WordPress Plugin freetobook widget Unspecified Vulnerability (1.0.5)

WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions Information Disclosure (2.5.2)

WordPress Plugin Google AdSense Click-Fraud Monitoring Cross-Site Scripting (1.8.6)

Severity

Critical

Classification

CVE-2016-0788 CWE-264 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities