Home

CVE-2014-3666

Description

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel.

Risk Information

Base Score
9.8
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
1.213

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in Jenkins 1.582Windows
Multiple vulnerabilities are fixed in Jenkins-Core 1.583Windows
Multiple vulnerabilities are fixed in Jenkins-Core 1.565.3Windows
Multiple vulnerabilities affected in Jenkins 1.582 (For Ubuntu)Linux
Multiple vulnerabilities affected in Jenkins 1.582 (For Debian)Linux
Multiple vulnerabilities affected in Jenkins 1.582 (For Centos)Linux
Multiple vulnerabilities affected in Jenkins 1.582 (For RedHat)Linux
Multiple vulnerabilities affected in Jenkins 1.582 (For Suse)Linux
Multiple vulnerabilities are fixed in Jenkins-Core for Linux 1.583Linux
Multiple vulnerabilities are fixed in Jenkins-Core for Linux 1.565.3Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234