CVEvulnerability
CVE-2022-43428
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-10-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-610
Description
Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process.
Affected configurations
• jenkins compuware topaz for total test (<= 2.4.8)
Related
Weakness · CWE (1)
- CWE-610 Externally Controlled Reference to a Resource in Another Sphere weakness
References
- http://www.openwall.com/lists/oss-security/2022/10/19/3 Mailing List, Third Party Advisory
- https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2624 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2022/10/19/3 Mailing List, Third Party Advisory
- https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2624 Vendor Advisory