Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-6321

Malicious code in bioql PyPI...

4.3CVSS4.9AI score0.00396EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 11:13 p.m.3 views

CVE-2022-36899

Jenkins Compuware ISPW Operations Plugin 1.0.8 and earlier does not restrict execution of a controller/agent message to agents, allowing attackers able to control agent processes to retrieve Java system properties...

8.2CVSS6.8AI score0.00391EPSS
Exploits0References1
OSV
OSV
added 2022/07/28 12:0 a.m.21 views

GHSA-57F2-52WJ-7VJ6 Agent-to-controller security bypass in Jenkins BMC Compuware ISPW Operations plugin

BMC Compuware ISPW Operations Plugin defines a controller/agent message that retrieves Java system properties. BMC Compuware ISPW Operations Plugin 1.0.8 and earlier does not restrict execution of the controller/agent message to agents. This allows attackers able to control agent processes to...

4.3CVSS8.2AI score0.00391EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2022/07/28 12:0 a.m.32 views

Agent-to-controller security bypass in Jenkins BMC Compuware ISPW Operations plugin

BMC Compuware ISPW Operations Plugin defines a controller/agent message that retrieves Java system properties. BMC Compuware ISPW Operations Plugin 1.0.8 and earlier does not restrict execution of the controller/agent message to agents. This allows attackers able to control agent processes to...

8.2CVSS7.9AI score0.00391EPSS
Exploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2022/07/28 12:0 a.m.25 views

Jenkins Compuware ISPW Operations Plugin does not perform permission checks in several HTTP endpoints

Jenkins BMC AMI DevX Code Pipeline Operations Plugin 1.0.8 and earlier does not perform permission checks in several HTTP endpoints. This allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins...

4.3CVSS4.9AI score0.00396EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2022/07/27 2:24 p.m.101 views

CVE-2022-36898

CVE-2022-36898 affects Jenkins Compuware ISPW Operations Plugin 1.0.8 and earlier. The vulnerability is a missing permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs stored in Jenkins. T...

4.3CVSS4.4AI score0.00396EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2022/07/27 12:0 a.m.2 views

Jenkins Compuware ISPW Operations Plugin 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

8.2CVSS8AI score0.00391EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/07/27 12:0 a.m.3 views

Jenkins Plugin 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

6.5CVSS6.6AI score0.00403EPSS
Exploits0References5
Rows per page
Query Builder