Design/Logic Flaw

2022-10-1916:15:00

PRIOn knowledge base

www.prio-n.com

jenkins

compuware

topaz

logic flaw

total test plugin

security vulnerability

file system

0.002 Low

EPSS

Percentile

52.5%

JSON

Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to read arbitrary files on the Jenkins controller file system.

CPENameOperatorVersion
compuware_topaz_for_total_testle2.4.8

CPE	Name	Operator	Version
	compuware_topaz_for_total_test	le	2.4.8

References

www.openwall.com/lists/oss-security/2022/10/19/3

www.jenkins.io/security/advisory/2022-10-19/

0.002 Low

EPSS

Percentile

52.5%

JSON

Related for PRION:CVE-2022-43429