vulnerability

Red Hat OpenShift: CVE-2016-3721: jenkins: Arbitrary build parameters are passed to build scripts as environment variables (SECURITY-170)

Severity
4
CVSS
(AV:N/AC:L/Au:S/C:N/I:P/A:N)
Published
May 17, 2016
Added
Jun 18, 2018
Modified
Jul 28, 2025

Description


Jenkins before 2.3 and LTS before 1.651.2 might allow remote authenticated users to inject arbitrary build parameters into the build environment via environment variables.

Solution

linuxrpm-upgrade-jenkins
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.