En resumen
- CVE-2022-43429 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a com.compuware.jenkins:compuware-topaz-for-total-test, compuware topaz for total test (jenkins).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.74%, mayor que el 54.6% de las vulnerabilidades.
- Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.
Description
Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to read arbitrary files on the Jenkins controller file system.
NVD description
Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to read arbitrary files on the Jenkins controller file system.
Más vulnerabilidades de com.compuware.jenkins:compuware-topaz-for-total-test
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free