Jenkins before 1.587 and LTS before 1.580.1 do not properly ensure trust separation between a master and slaves, which might allow remote attackers to execute arbitrary code on the master by leveraging access to the slave.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2015-11-25T20:00:00
Updated: 2024-08-06T10:50:18.303Z
Reserved: 2014-05-14T00:00:00
Link: CVE-2014-3665
Vulnrichment
No data.
NVD
Status : Modified
Published: 2015-11-25T20:59:00.190
Modified: 2024-11-21T02:08:36.503
Link: CVE-2014-3665
Redhat