CVE-2022-43423: medium-severity vulnerability in Jenkins Compuware Source Code Download for…
Published · Updated
Follow this CVE+ Monitor Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin+ Monitor com.compuware.jenkins:compuware-scm-downloader
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.7%
Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin 2.0.12 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Jenkins project · Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW PluginRelated CVEs — Jenkins Compuware Source Code Download for…
In the same product, most dangerous first.