Описание
The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized Java object, which triggers an LDAP query to a third-party server.
Меры по смягчению последствий
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat OpenShift Enterprise 2 | jenkins | Under investigation | ||
| Red Hat OpenShift Enterprise 3 | jenkins | Under investigation |
Показывать по
Дополнительная информация
Статус:
EPSS
8.1 High
CVSS3
6.8 Medium
CVSS2
Связанные уязвимости
The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized Java object, which triggers an LDAP query to a third-party server.
The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized Java object, which triggers an LDAP query to a third-party server.
The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allow ...
Improper Neutralization of Special Elements used in an LDAP Query in Jenkins
EPSS
8.1 High
CVSS3
6.8 Medium
CVSS2