CVE-2022-43422
MEDIUMJenkins Compuware Topaz Utilities Plugin <1.0.8 - Info Disclosure
Title source: llmDescription
Jenkins Compuware Topaz Utilities Plugin 1.0.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process.
Scores
CVSS v3
5.3
EPSS
0.0137
EPSS Percentile
80.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Classification
CWE
CWE-693
Status
published
Affected Products (2)
jenkins/compuware_topaz_utilities
< 1.0.9
com.compuware.jenkins/compuware-topaz-utilities
< 1.0.9Maven
Timeline
Published
Oct 19, 2022
Tracked Since
Feb 18, 2026