CVE-2014-3666

Redhat Openshift < 3.1 - Code Injection

Title source: rule
STIX 2.1

Description

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel.

References (2)

Core 2
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2016:0070

Scores

EPSS 0.0121
EPSS Percentile 79.3%

Details

CWE
CWE-94
Status published
Products (4)
jenkins/jenkins < 1.565.2
jenkins/jenkins < 1.582
org.jenkins-ci.main/jenkins-core 1.566 - 1.583Maven
redhat/openshift < 3.1
Published Oct 16, 2014
Tracked Since Feb 18, 2026