Search for vulnerabilities
| Vulnerability ID | VCID-szdt-snzm-2bbk |
| Aliases |
CVE-2014-3663
GHSA-64mc-2m9p-23c8 |
| Summary | Jenkins allows remote authenticated users to bypass intended restrictions and create or destroy arbitrary jobs Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions and create or destroy arbitrary jobs via unspecified vectors. |
| Status | Published |
| Exploitability | None |
| Weighted Severity | None |
| Risk | None |
| Affected and Fixed Packages | Package Details |
| CWE-863 | Incorrect Authorization |
| System | Score | Found at |
|---|---|---|
| generic_textual | MODERATE | https://access.redhat.com/errata/RHBA-2014:1630 |
| generic_textual | MODERATE | https://access.redhat.com/errata/RHSA-2016:0070 |
| generic_textual | MODERATE | https://access.redhat.com/security/cve/CVE-2014-3663 |
| epss | 0.00065 | https://api.first.org/data/v1/epss?cve=CVE-2014-3663 |
| generic_textual | MODERATE | https://bugzilla.redhat.com/show_bug.cgi?id=1147764 |
| generic_textual | MODERATE | https://nvd.nist.gov/vuln/detail/CVE-2014-3663 |
| generic_textual | MODERATE | https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01 |
| Percentile | 0.20459 |
| EPSS Score | 0.00065 |
| Published At | May 29, 2026, 12:55 p.m. |
| Date | Actor | Action | Source | VulnerableCode Version |
|---|---|---|---|---|
| 2026-05-29T09:37:03.407102+00:00 | GithubOSV Importer | Import | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-64mc-2m9p-23c8/GHSA-64mc-2m9p-23c8.json | 38.6.0 |