CVE-2016-0792

9

HIGHCVSS v2

Published

April 7, 2016

Affected

5 projects

Assigned by

Red Hat

Severity scale

010

Description

Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to execute arbitrary code via serialized data in an XML file, related to XStream and groovy.util.Expando.

jenkinsci/jenkins

GitHubJenkins automation server

<= 1.649, <= 1.642.1NVD

jenkins

Python Package IndexPython ctypes wrapper around Bob Jenkins' hash functions.

<= 1.649, <= 1.642.1NVD

jenkins

NPM

More on this CVE

NVD↗GitHub Advisory↗

Jenkins client

<= 1.649, <= 1.642.1NVD

jenkins

Docker HubDEPRECATED; use "jenkins/jenkins:lts" instead

<= 1.649, <= 1.642.1NVD

jenkins

RubyGemsA suite of utilities for bringing continous integration to your projects (not the other way around) with jenkins CI

<= 1.649, <= 1.642.1NVD

Security Advisories

CVE-2016-0792

Description

More on this CVE