CVE-2014-3680

medium

Published 2014-10-16 · Modified 2025-04-14

CVSS v3

—

CVSS v2

4.0

VIR risk

4.0

Description

Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01

Ecosystem	Package	Vulnerable	Fixed
Maven	org.jenkins-ci.main:jenkins-core	`>=1.566,<1.583`	`1.583`
Maven	org.jenkins-ci.main:jenkins-core	`<1.565.3`	`1.565.3`

Vendor	Product	Versions	Fixed
jenkins	jenkins	`{"endIncluding":"1.565.2"}`
redhat	openshift	`{"endIncluding":"3.1"}`

CWE-200

Verify integrity in audit chain (admin only). AS-IS.