The vulnerability of the Jenkins Compuware ISPW Operations Plugin involves a violation of data protection mechanisms, allowing an attacker to gain unauthorized access to protected information related to system configuration settings.

The vulnerability of the Jenkins Compuware ISPW Operations Plugin is related to a breach of data protection mechanisms. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected system configuration information...

CVE-2022-36899

Jenkins Compuware ISPW Operations Plugin 1.0.8 and earlier does not restrict execution of a controller/agent message to agents, allowing attackers able to control agent processes to retrieve Java system properties...

PT-2022-4034 · Bmc +2 · Jenkins Bmc Ami Devx Code Pipeline Operations Plugin +2

Name of the Vulnerable Software and Affected Versions: Jenkins Compuware ISPW Operations Plugin versions 1.0.8 and earlier Jenkins BMC AMI DevX Code Pipeline Operations Plugin versions 1.0.8 and earlier Description: A missing permission check in the plugin allows attackers with Overall/Read...