CVE-2016-9299 代码执行漏洞

From PwnWiki
Revision as of 11:06, 24 June 2021 by Pwnwiki (talk | contribs) (Created page with "CVE-2016-9299 代码执行漏洞")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Other languages:
Bahasa Indonesia • ‎Chinese • ‎English • ‎中文(中国大陆)‎ • ‎中文(简体)‎ • ‎粵語

简介

2.32之前的Jenkins和2.19.3之前的LTS中的远程处理模块允许远程攻击者通过精心制作的序列化Java对象执行任意代码,从而触发对第三方服务器的LDAP查询。

MSF

exploit/linux/misc/jenkins_ldap_deserialize