CVE-2022-36900: vulnerability in Jenkins Compuware zAdviser API Plugin
Published · Updated
Follow this CVE+ Monitor Jenkins Compuware zAdviser API Plugin+ Monitor com.compuware.jenkins:compuware-zadviser-api
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.1%
Jenkins Compuware zAdviser API Plugin 1.0.3 and earlier does not restrict execution of a controller/agent message to agents, allowing attackers able to control agent processes to retrieve Java system properties.
Affected products
Jenkins project · Jenkins Compuware zAdviser API Plugin