EDB-44642

functional

Jenkins CLI - HTTP Java Deserialization (Metasploit)

view exploit source exploit_dbverifiedtype remoteauthor Metasploitpublished 2018-05-17catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2016-9299UScritical9.8Exploit
The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized Java object, which triggers an LDAP quer…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan