1. Home
  2. Vulnerabilities
  3. CVE-2014-3664

CVE-2014-3664

CVSS v2.0 4 (Medium)
40% Progress
EPSS 0.24 % (62th)
0.24% Progress
Affected Products 2
Advisories 2
Info CVSS EPSS CAPEC Affected Configurations References Security Advisories Packages & Software Tools, Exploits & PoC Graph Web & Social Timeline

Directory traversal vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Overall/READ permission to read arbitrary files via unspecified vectors.

Weaknesses
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE Status
PUBLISHED
CNA
Red Hat, Inc.
Published Date
2014-10-15 14:55:07
(10 years ago)
Updated Date
2023-02-13 00:41:40
(19 months ago)

Affected Products

Jenkins

Redhat

Configuration #1

    CPE23 From Up To
  Jenkins 1.565.2 and prior versions cpe:2.3:a:jenkins:jenkins::*:*:*:lts <= 1.565.2

Configuration #2

    CPE23 From Up To
  Redhat Openshift 3.1 and prior versions cpe:2.3:a:redhat:openshift::*:*:*:enterprise <= 3.1

Configuration #3

    CPE23 From Up To
  Jenkins 1.582 and prior versions cpe:2.3:a:jenkins:jenkins <= 1.582