Security Advisory
CVE-2016-9299
9.8
CRITICAL
Vulnerability Description
The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized Java object, which triggers an LDAP query to a third-party server.
Published Date
January 12, 2017
Official Source
NIST NVD Advisory