CVE-2022-43428: medium-severity vulnerability in Jenkins Compuware Topaz for Total Test Plugin
Published · Updated
Follow this CVE+ Monitor Jenkins Compuware Topaz for Total Test Plugin+ Monitor com.compuware.jenkins:compuware-topaz-for-total-test
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.8%
Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Jenkins project · Jenkins Compuware Topaz for Total Test PluginRelated CVEs — Jenkins Compuware Topaz for Total Test Plugin
In the same product, most dangerous first.