Jenkins allows for Code Execution via Crafted Packet to the CLI

높음 7.5CVE-2014-3666 · GHSA-fvfh-8mj3-23xj · Published 16/10/2014 · updated 17/06/2026

요약

CVE-2014-3666은(는) org.jenkins-ci.main:jenkins-core, jenkins (jenkins), openshift (redhat)에 영향을 주는 높음 (CVSS 7.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 3.7%, 전체 취약점의 89.6%보다 높음.
조치: 1.583, 1.565.3 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
org.jenkins-ci.main:jenkins-core Maven	`≥ 1.566, < 1.583< 1.565.3`	`1.5831.565.3`
jenkins jenkins	`≤ 1.565.2≤ 1.582`	No fix yet
openshift redhat	`≤ 3.1`	No fix yet

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel.

NVD description

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Maven

≥ 1.566, < 1.583< 1.565.3

1.5831.565.3

≤ 1.565.2≤ 1.582

No fix yet

≤ 3.1

No fix yet

org.jenkins-ci.main:jenkins-core의 다른 취약점

모두 보기 →