En resumen
- CVE-2022-43427 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a com.compuware.jenkins:compuware-topaz-for-total-test, compuware topaz for total test (jenkins).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.56%, mayor que el 46.8% de las vulnerabilidades.
- Solución: actualizar a 2.4.9, 2.4.8 o posterior.
Description
Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
NVD description
Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
Más vulnerabilidades de com.compuware.jenkins:compuware-topaz-for-total-test
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free