CVE-2016-0792
High · 8.8CVSS
8.8
EPSS
83.3%
Published
Apr 7, 2016
CISA due date
—
The record
Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to execute arbitrary code via serialized data in an XML file, related to XStream and groovy.util.Expando.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | org.jenkins-ci.main:jenkins-core | 0 | 1.642.2 |
| Maven | org.jenkins-ci.main:jenkins-core | 1.643 | 1.650 |
| Mageia:5 | jenkins-remoting | 0 | 2.53.3-1.mga5 |
| Red Hat:openshift:2.0::el6 | ImageMagick | 0 | 0:6.7.2.7-5.el6_8 |
| Red Hat:openshift:2.0::el6 | ImageMagick-debuginfo | 0 | 0:6.7.2.7-5.el6_8 |
| Red Hat:openshift:2.0::el6 | ImageMagick-devel | 0 | 0:6.7.2.7-5.el6_8 |
| Red Hat:openshift:2.0::el6 | ImageMagick-doc | 0 | 0:6.7.2.7-5.el6_8 |
| Red Hat:openshift:2.0::el6 | ImageMagick-perl | 0 | 0:6.7.2.7-5.el6_8 |
| Red Hat:openshift:2.0::el6 | activemq | 0 | 0:5.9.0-6.redhat.611463.el6op |
| Red Hat:openshift:2.0::el6 | activemq-client | 0 | 0:5.9.0-6.redhat.611463.el6op |
| Red Hat:openshift:2.0::el6 | jenkins | 0 | 0:1.651.2-1.el6op |
| Red Hat:openshift:2.0::el6 | libcgroup | 0 | 0:0.40.rc1-18.el6_8 |
| Red Hat:openshift:2.0::el6 | libcgroup-debuginfo | 0 | 0:0.40.rc1-18.el6_8 |
| Red Hat:openshift:2.0::el6 | libcgroup-pam | 0 | 0:0.40.rc1-18.el6_8 |
| Red Hat:openshift:2.0::el6 | openshift-origin-broker | 0 | 0:1.16.3.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-broker-util | 0 | 0:1.37.6.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-cron | 0 | 0:1.25.4.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-diy | 0 | 0:1.26.2.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-haproxy | 0 | 0:1.31.6.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-jbosseap | 0 | 0:2.27.4.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-jbossews | 0 | 0:1.35.5.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-jenkins | 0 | 0:1.29.2.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-jenkins-client | 0 | 0:1.26.1.1-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-mongodb | 0 | 0:1.26.2.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-mysql | 0 | 0:1.31.3.3-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-nodejs | 0 | 0:1.33.1.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-perl | 0 | 0:1.30.2.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-php | 0 | 0:1.35.4.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-python | 0 | 0:1.34.3.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-ruby | 0 | 0:1.32.2.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-msg-node-mcollective | 0 | 0:1.30.2.2-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-node-proxy | 0 | 0:1.26.3.1-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-node-util | 0 | 0:1.38.7.1-1.el6op |
| Red Hat:openshift:2.0::el6 | rhc | 0 | 0:1.38.7.1-1.el6op |
| Red Hat:openshift:2.0::el6 | rubygem-openshift-origin-admin-console | 0 | 0:1.28.2.1-1.el6op |
| Red Hat:openshift:2.0::el6 | rubygem-openshift-origin-controller | 0 | 0:1.38.6.4-1.el6op |
| Red Hat:openshift:2.0::el6 | rubygem-openshift-origin-frontend-haproxy-sni-proxy | 0 | 0:0.5.2.1-1.el6op |
| Red Hat:openshift:2.0::el6 | rubygem-openshift-origin-msg-broker-mcollective | 0 | 0:1.36.2.4-1.el6op |
| Red Hat:openshift:2.0::el6 | rubygem-openshift-origin-node | 0 | 0:1.38.6.4-1.el6op |
| Red Hat:openshift:2.0::el6 | rubygem-openshift-origin-routing-daemon | 0 | 0:0.26.6.1-1.el6op |
| Red Hat:openshift:3.1::el7 | jenkins | 0 | 0:1.642.2-1.el7 |
| Red Hat:openshift:3.1::el7 | jenkins-plugin-credentials | 0 | 0:1.24-2.el7 |
| Red Hat:openshift:3.1::el7 | jenkins-plugin-durable-task | 0 | 0:1.7-1.el7 |
| Red Hat:openshift:3.1::el7 | jenkins-plugin-kubernetes | 0 | 0:0.5-1.el7 |
| Red Hat:openshift:3.1::el7 | jenkins-plugin-openshift-pipeline | 0 | 0:1.0.9-1.el7 |
| maven | org.jenkins-ci.main/jenkins-core | 1.643 | 1.650 |
Related vulnerabilities
- GHSA-85h6-5m3v-gx37 Jenkins has a stored XSS vulnerability in node offline cause description Also affects org.jenkins-ci.main:jenkins-core
- GHSA-wfhp-qgm8-5p5c Jenkins has a build information disclosure vulnerability through Run Parameter Also affects org.jenkins-ci.main:jenkins-core
- CVE-2026-27099 Jenkins 2.483 through 2.550 (both inclusive), LTS 2.492.1 through 2.541.1 (both… Also affects org.jenkins-ci.main:jenkins-core
- CVE-2026-27100 Jenkins 2.550 and earlier, LTS 2.541.1 and earlier accepts Run Parameter values that… Also affects org.jenkins-ci.main:jenkins-core
- GHSA-6837-qgrc-x5p6 Jenkins has a CSRF vulnerability on the login form Also affects org.jenkins-ci.main:jenkins-core
- GHSA-9p56-p6mw-w8qc Jenkins has a Denial of service vulnerability in HTTP-based CLI Also affects org.jenkins-ci.main:jenkins-core
- GHSA-fxj7-6v9w-xc76 Jenkins's build authorization token is stored and displayed in plain text Also affects org.jenkins-ci.main:jenkins-core
- GHSA-hxjg-2jvf-h3rx Jenkins's build authorization token is stored and displayed in plain text Also affects org.jenkins-ci.main:jenkins-core