CVE Catalog
CVE-2016-9299
CriticalSummary
The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized Java object, which triggers an LDAP query to a third-party server.
Risk Assessment
Attackers can exploit this vulnerability to execute remote code, potentially leading to system compromise and data leakage.
Recommendation
It is recommended to update Jenkins to the latest version to mitigate this vulnerability and secure the system against potential attacks.
Original NVD description (English source)
The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized Java object, which triggers an LDAP query to a third-party server.