CVE-2022-43424: medium-severity vulnerability in Jenkins Compuware Xpediter Code Coverage Plugin
Published · Updated
Follow this CVE+ Monitor Jenkins Compuware Xpediter Code Coverage Plugin+ Monitor com.compuware.jenkins:compuware-xpediter-code-coverage
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.8%
Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Jenkins project · Jenkins Compuware Xpediter Code Coverage PluginRelated CVEs — Jenkins Compuware Xpediter Code Coverage Plugin
In the same product, most dangerous first.