Design/Logic Flaw

2022-07-2715:15:00

PRIOn knowledge base

www.prio-n.com

logic flaw

jenkins

compuware xpediter

code coverage plugin

security vulnerability

credential enumeration

AI Score

4.5

Confidence

High

EPSS

0.001

Percentile

22.0%

JSON

A missing permission check in Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins.