Lucene search
HistoryOct 16, 2014 - 7:55 p.m.
CVE-2014-3666
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.019 Low
EPSS
Percentile
88.6%
Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel.
Affected configurations
Node
redhatopenshiftRange≤3.1enterprise
Node
jenkinsjenkinsRange≤1.582
Node
jenkinsjenkinsRange≤1.565.2lts
Related
ubuntucve
ubuntucve
CVE-2014-3666
2014-10-16 00:00:00
prion
prion
Code injection
2014-10-16 19:55:00
cve
cve
CVE-2014-3666
2014-10-16 19:55:08
veracode
veracode
Arbitrary Code Execution
2019-05-02 04:56:01
Improper Access Control
2019-05-02 05:21:30
Privilege Escalation
2019-05-02 05:21:27
cvelist
cvelist
CVE-2014-3666
2014-10-16 19:00:00
openvas
openvas
Jenkins Multiple Vulnerabilities (Oct 2014) - Windows
2015-12-21 00:00:00
Jenkins Multiple Vulnerabilities (Oct 2014) - Linux
2016-08-05 00:00:00
archlinux
archlinux
jenkins: multiple issues
2014-10-02 00:00:00
nessus
nessus
Jenkins < 1.583 / 1.565.3 and Jenkins Enterprise 1.532.x / 1.554.x / 1.565.x < 1.532.10.1 / 1.554.10.1 / 1.565.3.1 Multiple Vulnerabilities
2014-11-04 00:00:00
FreeBSD : jenkins -- remote execution, privilege escalation, XSS, password exposure, ACL hole, DoS (549a2771-49cc-11e4-ae2c-c80aa9043978)
2014-10-02 00:00:00
RHEL 7 : openshift (RHSA-2016:0070)
2018-12-06 00:00:00
freebsd
freebsd
redhat
redhat
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.019 Low
EPSS
Percentile
88.6%
Related for NVD:CVE-2014-3666