CVE-2016-3721

4.3

MEDIUMCVSS v3

Published

May 17, 2016

CVSS v2

4 MEDIUM

Affected

5 projects

Assigned by

Red Hat

Severity scale

010

Description

Jenkins before 2.3 and LTS before 1.651.2 might allow remote authenticated users to inject arbitrary build parameters into the build environment via environment variables.

jenkinsci/jenkins

GitHubJenkins automation server

<= 1.651.1, <= 2.2NVD

jenkins

Python Package IndexPython ctypes wrapper around Bob Jenkins' hash functions.

<= 1.651.1, <= 2.2NVD

jenkins

NPM

More on this CVE

NVD↗GitHub Advisory↗

Jenkins client

<= 1.651.1, <= 2.2NVD

jenkins

Docker HubDEPRECATED; use "jenkins/jenkins:lts" instead

<= 1.651.1, <= 2.2NVD

jenkins

RubyGemsA suite of utilities for bringing continous integration to your projects (not the other way around) with jenkins CI

<= 1.651.1, <= 2.2NVD

Security Advisories

CVE-2016-3721

Description

More on this CVE