CVE-2014-3663

Published: Oct 16, 2014Modified: May 6, 2026

6.0

Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Exploitability: 6.8 / Impact: 6.4

Source: NVD

Description

Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions and create or destroy arbitrary jobs via unspecified vectors.

Affected (3)

Products: Jenkins: Jenkins · Redhat: Openshift

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jenkins Jenkins	Up to 1.565.2

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Jenkins Jenkins	Up to 1.582

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Openshift	Up to 3.1

Related CWEs

CWE-264

References (4)

https://access.redhat.com/errata/RHSA-2016:0070

Source: secalert@redhat.com

https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01

Source: secalert@redhat.com

Vendor Advisory

https://access.redhat.com/errata/RHSA-2016:0070

Source: af854a3a-2127-422b-91ae-364da2661108

https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.