Jenkins CLI HTTP Java Deserialization

Discussion in 'News Aggregator' started by Packet Storm, 17 May 2018.

  1. Packet Storm

    Packet Storm Guest

    This Metasploit module exploits a vulnerability in Jenkins. An unsafe deserialization bug exists on the Jenkins, which allows remote arbitrary code execution via HTTP. Authentication is not required to exploit this vulnerability.

    Continue reading...
     

Share This Page

Loading...