CVE-2022-36900

CVE-2022-36900 affects Jenkins Compuware zAdviser API Plugin versions 1.0.3 and earlier. The root cause is that the plugin’s controller/agent message is not restricted to agents, enabling an attacker who can control agent processes to retrieve Java system properties. This has been described in mu...