Em resumo
- CVE-2014-3665 é uma vulnerabilidade MÉDIO (CVSS 6.8) que afeta org.jenkins-ci.main:jenkins-core, jenkins (jenkins).
- Chance de exploração nos próximos 30 dias (EPSS): 2.5%, maior que 84.7% das vulnerabilidades.
- Correção: atualize para 1.587 ou posterior.
Description
Jenkins prior to 1.587 and LTS before 1.580.1 do not properly ensure trust separation between a master and slaves, which might allow remote attackers to execute arbitrary code on the master by leveraging access to the slave.
NVD description
Jenkins before 1.587 and LTS before 1.580.1 do not properly ensure trust separation between a master and slaves, which might allow remote attackers to execute arbitrary code on the master by leveraging access to the slave.
Mais vulnerabilidades de org.jenkins-ci.main:jenkins-core
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free