CVE-2022-43422: medium-severity vulnerability in Jenkins Compuware Topaz Utilities Plugin
Published · Updated
Follow this CVE+ Monitor Jenkins Compuware Topaz Utilities Plugin+ Monitor com.compuware.jenkins:compuware-topaz-utilities
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.8%
Jenkins Compuware Topaz Utilities Plugin 1.0.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Jenkins project · Jenkins Compuware Topaz Utilities PluginRelated CVEs — Jenkins Compuware Topaz Utilities Plugin
In the same product, most dangerous first.