VULNERABILITY INTELLIGENCE

CVE-2014-3665

CVSS score6.8 MEDIUM
EPSS probability2.50%
CISA KEVNot currently listed
Published2015-11-25
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Jenkins before 1.587 and LTS before 1.580.1 do not properly ensure trust separation between a master and slaves, which might allow remote attackers to execute arbitrary code on the master by leveraging access to the slave.

Primary references