Jenkins LDAP Java Library Deserialization Vulnerability Remote Code Execution Exploit

An unauthenticated remote code execution vulnerability allowed attackers to transfer a serialized Java object to the Jenkins CLI, making Jenkins connect to an attacker-controlled LDAP server, which in turn can send a serialized payload leading to code execution, bypassing existing protection mechanisms.

CVE Link
CVE-2016-9299
Exploit Type - Old
Exploits/Remote
Exploit Platform
Windows
Linux
Exploit Type
Exploits
Remote
Product Name
Impact