Add CVE to module description

2017-11-07 11:05:14 -05:00 · 2017-11-07 11:05:14 -05:00 · 7173e7f4b4
parent d770406049
commit 7173e7f4b4
1 changed files with 1 additions and 1 deletions
--- a/modules/exploits/multi/http/jenkins_xstream_deserialize.rb
+++ b/modules/exploits/multi/http/jenkins_xstream_deserialize.rb
@ -14,7 +14,7 @@ class MetasploitModule < Msf::Exploit::Remote
    super(update_info(info,
      'Name'           => 'Jenkins XStream Groovy classpath Deserialization Vulnerability',
      'Description'    => %q{
-        This module exploits a vulnerability in Jenkins versions older than 1.650 and Jenkins LTS versions
+        This module exploits CVE-2016-0792 a vulnerability in Jenkins versions older than 1.650 and Jenkins LTS versions
        older than 1.642.2 which is caused by unsafe deserialization in XStream with Groovy in the classpath,
        which allows remote arbitrary code execution. The issue affects default installations. Authentication
        is not required to exploit the vulnerability.