Moderate severityNVD Advisory· Published Oct 15, 2014· Updated Jun 17, 2026

CVE-2014-3664

Description

Directory traversal vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Overall/READ permission to read arbitrary files via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.jenkins-ci.main:jenkins-coreMaven	>= 1.566, < 1.583	1.583
org.jenkins-ci.main:jenkins-coreMaven	< 1.565.3	1.565.3

Affected products

Jenkins Project/Jenkins2 versions
cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*range: <=1.582
- cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*range: <=1.565.2
Red Hat/Openshift
cpe:2.3:a:redhat:openshift:*:*:*:*:enterprise:*:*:*
Range: <=3.1
ghsa-coords
pkg:maven/org.jenkins-ci.main/jenkins-core
Range: >= 1.566, < 1.583

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-3gp5-92h5-h855ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2014-3664ghsaADVISORY
access.redhat.com/errata/RHBA-2014:1630ghsaWEB
access.redhat.com/errata/RHSA-2016:0070nvdWEB
access.redhat.com/security/cve/CVE-2014-3664ghsaWEB
bugzilla.redhat.com/show_bug.cginvdWEB
exchange.xforce.ibmcloud.com/vulnerabilities/96973nvdWEB
wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01nvdWEB

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000