Em resumo
- CVE-2022-43427 é uma vulnerabilidade MÉDIO (CVSS 4.3) que afeta com.compuware.jenkins:compuware-topaz-for-total-test, compuware topaz for total test (jenkins).
- Chance de exploração nos próximos 30 dias (EPSS): 0.56%, maior que 46.8% das vulnerabilidades.
- Correção: atualize para 2.4.9, 2.4.8 ou posterior.
Description
Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
NVD description
Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
Mais vulnerabilidades de com.compuware.jenkins:compuware-topaz-for-total-test
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free