The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Jenkins 2016 02 24 | — | Upgrade Jenkins LTS to the latest versionUpgrade Jenkins to the latest versionUpgrade Jenkins to version 1.650Upgrade Jenkins LTS to version 1.642.2 | Nov 13, 2017 | Apr 7, 2016 |
| Redhat Openshift | — | Upgrade rubygem-openshift-origin-admin-consoleUpgrade openshift-origin-brokerUpgrade rubygem-openshift-origin-nodeUpgrade openshift-origin-cartridge-rubyUpgrade openshift-origin-msg-node-mcollectiveUpgrade jenkins-plugin-kubernetesUpgrade openshift-origin-cartridge-jenkins-clientUpgrade openshift-origin-cartridge-cronUpgrade openshift-origin-cartridge-diyUpgrade openshift-origin-cartridge-haproxyUpgrade openshift-origin-cartridge-jbossewsUpgrade openshift-origin-cartridge-mysqlUpgrade jenkins-plugin-openshift-pipelineUpgrade openshift-origin-cartridge-mongodbUpgrade jenkinsUpgrade jenkins-plugin-durable-taskUpgrade rubygem-openshift-origin-routing-daemonUpgrade rhcUpgrade activemqUpgrade libcgroupUpgrade openshift-origin-cartridge-jbosseapUpgrade openshift-origin-cartridge-perlUpgrade openshift-origin-cartridge-phpUpgrade rubygem-openshift-origin-controllerUpgrade jenkins-plugin-credentialsUpgrade openshift-origin-cartridge-pythonUpgrade rubygem-openshift-origin-frontend-haproxy-sni-proxyUpgrade openshift-origin-node-proxyUpgrade openshift-origin-node-utilUpgrade openshift-origin-cartridge-nodejsUpgrade openshift-origin-broker-utilUpgrade ImageMagickUpgrade rubygem-openshift-origin-msg-broker-mcollectiveUpgrade openshift-origin-cartridge-jenkins | Jun 18, 2018 | Feb 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub