CVE Catalog

CVE-2016-0788

Critical
Published: Translated: NVD NIST

Summary

The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener.

Risk Assessment

Attackers can remotely take control of the system, leading to serious security breaches and potential data loss.

Recommendation

It is recommended to update Jenkins to the latest version to mitigate this vulnerability.

Original NVD description (English source)

The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS