CVE-2022-36899: vulnerability in Jenkins Compuware ISPW Operations Plugin
Published · Updated
Follow this CVE+ Monitor Jenkins Compuware ISPW Operations Plugin+ Monitor com.compuware.jenkins:compuware-ispw-operations
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.1%
Jenkins Compuware ISPW Operations Plugin 1.0.8 and earlier does not restrict execution of a controller/agent message to agents, allowing attackers able to control agent processes to retrieve Java system properties.
Affected products
Jenkins project · Jenkins Compuware ISPW Operations PluginRelated CVEs — Jenkins Compuware ISPW Operations Plugin
In the same product, most dangerous first.