CVE-2016-0788
Critical · 9.8CVSS
9.8
EPSS
11.8%
Published
Apr 7, 2016
CISA due date
—
The record
The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | org.jenkins-ci.main:jenkins-core | 0 | 1.642.2 |
| Maven | org.jenkins-ci.main:jenkins-core | 1.643 | 1.650 |
| Red Hat:openshift:2.0::el6 | ImageMagick | 0 | 0:6.7.2.7-5.el6_8 |
| Red Hat:openshift:2.0::el6 | ImageMagick-debuginfo | 0 | 0:6.7.2.7-5.el6_8 |
| Red Hat:openshift:2.0::el6 | ImageMagick-devel | 0 | 0:6.7.2.7-5.el6_8 |
| Red Hat:openshift:2.0::el6 | ImageMagick-doc | 0 | 0:6.7.2.7-5.el6_8 |
| Red Hat:openshift:2.0::el6 | ImageMagick-perl | 0 | 0:6.7.2.7-5.el6_8 |
| Red Hat:openshift:2.0::el6 | activemq | 0 | 0:5.9.0-6.redhat.611463.el6op |
| Red Hat:openshift:2.0::el6 | activemq-client | 0 | 0:5.9.0-6.redhat.611463.el6op |
| Red Hat:openshift:2.0::el6 | jenkins | 0 | 0:1.651.2-1.el6op |
| Red Hat:openshift:2.0::el6 | libcgroup | 0 | 0:0.40.rc1-18.el6_8 |
| Red Hat:openshift:2.0::el6 | libcgroup-debuginfo | 0 | 0:0.40.rc1-18.el6_8 |
| Red Hat:openshift:2.0::el6 | libcgroup-pam | 0 | 0:0.40.rc1-18.el6_8 |
| Red Hat:openshift:2.0::el6 | openshift-origin-broker | 0 | 0:1.16.3.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-broker-util | 0 | 0:1.37.6.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-cron | 0 | 0:1.25.4.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-diy | 0 | 0:1.26.2.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-haproxy | 0 | 0:1.31.6.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-jbosseap | 0 | 0:2.27.4.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-jbossews | 0 | 0:1.35.5.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-jenkins | 0 | 0:1.29.2.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-jenkins-client | 0 | 0:1.26.1.1-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-mongodb | 0 | 0:1.26.2.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-mysql | 0 | 0:1.31.3.3-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-nodejs | 0 | 0:1.33.1.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-perl | 0 | 0:1.30.2.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-php | 0 | 0:1.35.4.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-python | 0 | 0:1.34.3.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-ruby | 0 | 0:1.32.2.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-msg-node-mcollective | 0 | 0:1.30.2.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-node-proxy | 0 | 0:1.26.3.1-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-node-util | 0 | 0:1.38.7.1-1.el6op |
| Red Hat:openshift:2.0::el6 | rhc | 0 | 0:1.38.7.1-1.el6op |
| Red Hat:openshift:2.0::el6 | rubygem-openshift-origin-admin-console | 0 | 0:1.28.2.1-1.el6op |
| Red Hat:openshift:2.0::el6 | rubygem-openshift-origin-controller | 0 | 0:1.38.6.4-1.el6op |
| Red Hat:openshift:2.0::el6 | rubygem-openshift-origin-frontend-haproxy-sni-proxy | 0 | 0:0.5.2.1-1.el6op |
| Red Hat:openshift:2.0::el6 | rubygem-openshift-origin-msg-broker-mcollective | 0 | 0:1.36.2.4-1.el6op |
| Red Hat:openshift:2.0::el6 | rubygem-openshift-origin-node | 0 | 0:1.38.6.4-1.el6op |
| Red Hat:openshift:2.0::el6 | rubygem-openshift-origin-routing-daemon | 0 | 0:0.26.6.1-1.el6op |
| Red Hat:openshift:3.1::el7 | jenkins | 0 | 0:1.642.2-1.el7 |
| Red Hat:openshift:3.1::el7 | jenkins-plugin-credentials | 0 | 0:1.24-2.el7 |
| Red Hat:openshift:3.1::el7 | jenkins-plugin-durable-task | 0 | 0:1.7-1.el7 |
| Red Hat:openshift:3.1::el7 | jenkins-plugin-kubernetes | 0 | 0:0.5-1.el7 |
| Red Hat:openshift:3.1::el7 | jenkins-plugin-openshift-pipeline | 0 | 0:1.0.9-1.el7 |
| maven | org.jenkins-ci.main/jenkins-core | 1.643 | 1.650 |
Related vulnerabilities
- GHSA-85h6-5m3v-gx37 Jenkins has a stored XSS vulnerability in node offline cause description Also affects org.jenkins-ci.main:jenkins-core
- GHSA-wfhp-qgm8-5p5c Jenkins has a build information disclosure vulnerability through Run Parameter Also affects org.jenkins-ci.main:jenkins-core
- CVE-2026-27099 Jenkins 2.483 through 2.550 (both inclusive), LTS 2.492.1 through 2.541.1 (both… Also affects org.jenkins-ci.main:jenkins-core
- CVE-2026-27100 Jenkins 2.550 and earlier, LTS 2.541.1 and earlier accepts Run Parameter values that… Also affects org.jenkins-ci.main:jenkins-core
- GHSA-6837-qgrc-x5p6 Jenkins has a CSRF vulnerability on the login form Also affects org.jenkins-ci.main:jenkins-core
- GHSA-9p56-p6mw-w8qc Jenkins has a Denial of service vulnerability in HTTP-based CLI Also affects org.jenkins-ci.main:jenkins-core
- GHSA-fxj7-6v9w-xc76 Jenkins's build authorization token is stored and displayed in plain text Also affects org.jenkins-ci.main:jenkins-core
- GHSA-hxjg-2jvf-h3rx Jenkins's build authorization token is stored and displayed in plain text Also affects org.jenkins-ci.main:jenkins-core