CVE-2016-0788: Jenkins allows Execution of Code by Opening a JRMP Listener

May 14, 2022 (updated March 13, 2025)

The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener.

References

access.redhat.com/errata/RHSA-2016:0711
github.com/advisories/GHSA-j7q5-h445-f7pc
github.com/jenkinsci/jenkins
github.com/jenkinsci/jenkins/commit/1ec232ca1c80e924d70212313b852aec408aa37e
nvd.nist.gov/vuln/detail/CVE-2016-0788
wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-02-24

Code Behaviors & Features

Detect and mitigate CVE-2016-0788 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →