CVE-2014-3665 in CloudBees Jenkins
Summary
CloudBees Jenkins before 1.587 and LTS before 1.580.1 do not properly ensure trust separation between a master and slaves, which might allow remote attackers to execute arbitrary code on the master by leveraging access to the slave.
Reservation
05/14/2014
Disclosure
11/25/2015
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 79315 | CloudBees Jenkins Trust Separation access control | 264 | Not defined | Official fix | CVE-2014-3665 |