Description

Jenkins before 1.587 and LTS before 1.580.1 do not properly ensure trust separation between a master and slaves, which might allow remote attackers to execute arbitrary code on the master by leveraging access to the slave.

Remediation

References

CVE-2014-3665

Related Vulnerabilities

Oracle Database Server CVE-2006-0291 Vulnerability (CVE-2006-0291)

WordPress Plugin NextGEN Gallery-WordPress Gallery SQL Injection (3.2.10)

Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4431)

Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-18670)

Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-18470)

Severity

Medium

Classification

CVE-2014-3665 CWE-264

Tags

Missing Update Known Vulnerabilities