CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2018-01-29
Jenkins CLI Java Deserialization Remote Code Execution Vulnerability Analysis (CVE-2017-1000353)
[Affected Scope] Jenkins weekly versions 2.56 and earlier, and LTS versions 2.46.1 and earlier
[Impact] Unauthenticated remote attackers can execute arbitrary system commands and fully compromise the Jenkins master node by sending a serialized Java SignedObject
[Mitigation] Immediately upgrade Jenkins to version 2.57+ or LTS 2.46.2+, and disable the legacy remoting-based CLI protocol