Логотип exploitDog
bind:CVE-2022-43428
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-43428

Количество 2

Количество 2

nvd логотип

CVE-2022-43428

больше 3 лет назад

Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process.

CVSS3: 5.3
EPSS: Низкий
github логотип

GHSA-xp3r-9wx8-q2mm

больше 3 лет назад

Agent-to-controller security bypass vulnerabilities in Jenkins Compuware Topaz for Total Test Plugin

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2022-43428

Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process.

CVSS3: 5.3
1%
Низкий
больше 3 лет назад
github логотип
GHSA-xp3r-9wx8-q2mm

Agent-to-controller security bypass vulnerabilities in Jenkins Compuware Topaz for Total Test Plugin

CVSS3: 7.5
1%
Низкий
больше 3 лет назад

Уязвимостей на страницу