SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  CloudBees Jenkins Insecure Deserialization

Category: WEB-ATTACKS      

Multiple unspecified API endpoints in CloudBees Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to execute arbitrary code via serialized data in an XML file, related to XStream and groovy.util.Expando.

References
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0792


Relevant Information