Jenkins allows Execution of Code by Opening a JRMP Listener

CRITICAL 9.8CVE-2016-0788 · GHSA-j7q5-h445-f7pc · Published 07/04/2016 · updated 17/06/2026

Package	Affected versions	Patched versions
org.jenkins-ci.main:jenkins-core Maven	`≥ 1.643, < 1.650< 1.642.2`	`1.6501.642.2`
jenkins jenkins	`= 1.642.1≤ 1.649`	No fix yet
openshift redhat	`= 3.1`	No fix yet

Description

The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener.

NVD description

The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.