Design/Logic Flaw

2022-10-1916:15:00

PRIOn knowledge base

www.prio-n.com

design flaw

logic flaw

jenkins compuware xpediter

code coverage plugin

unauthorized access

java system properties

0.001 Low

EPSS

Percentile

33.6%

JSON

Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process.

CPENameOperatorVersion
compuware_xpediter_code_coveragelt1.0.8

CPE	Name	Operator	Version
	compuware_xpediter_code_coverage	lt	1.0.8

References

www.openwall.com/lists/oss-security/2022/10/19/3

www.jenkins.io/security/advisory/2022-10-19/

0.001 Low

EPSS

Percentile

33.6%

JSON

Related for PRION:CVE-2022-43424