Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2015-8103
HistoryNov 25, 2015 - 12:00 a.m.

CVE-2015-8103

2015-11-2500:00:00
ubuntu.com
ubuntu.com
54

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.839

Percentile

98.5%

JSON

The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2
allows remote attackers to execute arbitrary code via a crafted serialized
Java object, related to a problematic
webapps/ROOT/WEB-INF/lib/commons-collections-*.jar file and the “Groovy
variant in ‘ysoserial’”.

Bugs

Related

cvelist 1
checkpoint_advisories 1
openvas 4
osv 1
github 1
packetstorm 2
prion 1
mageia 1
exploitdb 1
metasploit 3
nvd 1
canvas 1
nessus 3
zdt 1
veracode 12
cve 1
cert 1
archlinux 1
redhat 3
impervablog 1
cvelist
cvelist
CVE-2015-8103
2015-11-25 20:00:00
checkpoint_advisories
checkpoint_advisories
Jenkins CI Server Commons-Collections Library Insecure Deserialization (CVE-2015-8103)
2015-12-21 00:00:00
openvas
openvas
Jenkins CLI RMI Java Deserialization Vulnerability
2016-07-22 00:00:00
Mageia: Security Advisory (MGASA-2016-0137)
2016-05-09 00:00:00
Jenkins Multiple Vulnerabilities (Nov 2015) - Linux
2016-08-05 00:00:00
osv
osv
Jenkins CLI Deserialization of Untrusted Data vulnerability
2022-05-13 01:30:07
github
github
Jenkins CLI Deserialization of Untrusted Data vulnerability
2022-05-13 01:30:07
packetstorm
packetstorm
Jenkins-CI Unauthenticated Script-Console Scanner
2024-09-01 00:00:00
Jenkins CLI RMI Java Deserialization
2015-12-14 00:00:00
prion
prion
Arbitrary file deletion
2015-11-25 20:59:00
mageia
mageia
Updated apache-commons-collections packages fix CVE-2015-8103
2016-04-13 20:39:04
exploitdb
exploitdb
Jenkins CLI - RMI Java Deserialization (Metasploit)
2015-12-15 00:00:00
metasploit
metasploit
Jenkins-CI Unauthenticated Script-Console Scanner
2015-09-02 20:12:05
OpenNMS Java Object Unserialization Remote Code Execution
2016-07-12 03:22:32
Jenkins CLI RMI Java Deserialization Vulnerability
2015-12-11 20:57:10
nvd
nvd
CVE-2015-8103
2015-11-25 20:59:19
canvas
canvas
Immunity Canvas: JENKINS_CLI_DESERIALIZATION
2015-11-25 20:59:00
nessus
nessus
Jenkins < 1.638 / 1.625.2 Java Object Deserialization RCE
2015-11-17 00:00:00
RHEL 6 : Red Hat OpenShift Enterprise 2.2.9 (RHSA-2016:0489)
2018-12-04 00:00:00
RHEL 7 : openshift (RHSA-2016:0070)
2018-12-06 00:00:00
zdt
zdt
Jenkins CLI RMI Java Deserialization Exploit
2015-12-15 00:00:00
veracode
veracode
Command Injection
2019-05-02 05:21:37
Improper Access Control
2019-05-02 05:21:30
Privilege Escalation
2019-05-02 05:21:27
cve
cve
CVE-2015-8103
2015-11-25 20:59:19
cert
cert
Apache Commons Collections Java library insecurely deserializes data
2015-11-13 00:00:00
archlinux
archlinux
jenkins: multiple issues
2015-11-18 00:00:00
redhat
redhat
(RHSA-2016:22381) Important: Red Hat OpenShift Enterprise 2.2.9 security, bug fix, and enhancement update
2016-01-11 05:00:00
(RHSA-2016:0489) Important: Red Hat OpenShift Enterprise 2.2.9 security, bug fix, and enhancement update
2016-03-22 00:00:00
(RHSA-2016:0070) Important: Red Hat OpenShift Enterprise 3.1.1 bug fix and enhancement update
2016-01-26 19:01:15
impervablog
impervablog
Deserialization Attacks Surge Motivated by Illegal Crypto-mining
2018-01-24 17:45:08

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.839

Percentile

98.5%

JSON
Related for UB:CVE-2015-8103
cvelist1checkpoint_advisories1openvas4osv1github1packetstorm2prion1mageia1exploitdb1metasploit3nvd1canvas1nessus3zdt1veracode12cve1cert1archlinux1redhat3impervablog1