CVE-2015-8103

The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary code via a crafted serialized Java object, related to a problematic webapps/ROOT/WEB-INF/lib/commons-collections-*.jar file and the "Groovy variant in 'ysoserial'".

• CWE-502

• http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/#jenkinsExploit
• http://packetstormsecurity.com/files/134805/Jenkins-CLI-RMI-Java-Deserialization.htmlExploit, Third Party Advisory, VDB Entry
• http://rhn.redhat.com/errata/RHSA-2016-0489.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2015/11/09/5Mailing List
• http://www.openwall.com/lists/oss-security/2015/11/18/11Mailing List
• http://www.openwall.com/lists/oss-security/2015/11/18/13Mailing List
• http://www.openwall.com/lists/oss-security/2015/11/18/2Mailing List
• http://www.securityfocus.com/bid/77636Broken Link
• https://access.redhat.com/errata/RHSA-2016:0070Third Party Advisory
• https://jenkins-ci.org/content/mitigating-unauthenticated-remote-code-execution-0-day-jenkins-cliExploit
• https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11Vendor Advisory
• https://www.exploit-db.com/exploits/38983/Exploit, Third Party Advisory, VDB Entry
• http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/#jenkinsExploit
• http://packetstormsecurity.com/files/134805/Jenkins-CLI-RMI-Java-Deserialization.htmlExploit, Third Party Advisory, VDB Entry
• http://rhn.redhat.com/errata/RHSA-2016-0489.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2015/11/09/5Mailing List
• http://www.openwall.com/lists/oss-security/2015/11/18/11Mailing List
• http://www.openwall.com/lists/oss-security/2015/11/18/13Mailing List
• http://www.openwall.com/lists/oss-security/2015/11/18/2Mailing List
• http://www.securityfocus.com/bid/77636Broken Link
• https://access.redhat.com/errata/RHSA-2016:0070Third Party Advisory
• https://jenkins-ci.org/content/mitigating-unauthenticated-remote-code-execution-0-day-jenkins-cliExploit
• https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11Vendor Advisory
• https://www.exploit-db.com/exploits/38983/Exploit, Third Party Advisory, VDB Entry

Published

Nov 25, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-8094Open redirect vulnerability in Cloudera HUE before 3.10.0 al…
• CVE-2015-8095The recycle bin feature in the Monster Menus module 7.x-1.21…
• CVE-2015-8096Integer overflow in Google Picasa 3.9.140 Build 239 and Buil…
• CVE-2015-8098F5 BIG-IP APM 11.4.1 before 11.4.1 HF9, 11.5.x before 11.5.3…
• CVE-2015-8099F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, an…
• CVE-2015-8100The net-snmp package in OpenBSD through 5.8 uses 0644 permis…
• CVE-2015-8104The KVM subsystem in the Linux kernel through 4.2.6, and Xen…10
• CVE-2015-8105Cross-site scripting (XSS) vulnerability in program/js/app.j…
• CVE-2015-8106Format string vulnerability in the CmdKeywords function in f…
• CVE-2015-8107Format string vulnerability in GNU a2ps 4.14 allows remote a…
• CVE-2015-8108The management interface in LenovoEMC EZ Media & Backup (hm3…
• CVE-2015-8109Lenovo System Update (formerly ThinkVantage System Update) b…