CVE-2022-36897

A missing permission check in Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins...

Agent-to-controller security bypass vulnerability in Jenkins Compuware Xpediter Code Coverage Plugin

Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier implements an agent/controller message that does not limit where it can be executed. It allows attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process. This vulnerability...

GHSA-MFCW-83QG-4VW3 Agent-to-controller security bypass vulnerability in Jenkins Compuware Xpediter Code Coverage Plugin

Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier implements an agent/controller message that does not limit where it can be executed. It allows attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process. This vulnerability...

CVE-2022-43424

Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process...

CVE-2022-43424

Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process...

Design/Logic Flaw

Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process...

CVE-2022-43424

Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process...

CVE-2022-43424: Protection Mechanism Failure

Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process...

Jenkins Compuware Xpediter Code Coverage Plugin security vulnerabilities

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

PT-2022-26908 · Jenkins · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins Compuware Xpediter Code Coverage Plugin versions 1.0.7 and earlier Jenkins versions 2.318 and earlier, LTS 2.303.2 and earlier Description: The issue allows attackers able to control agent processes to obtain the values of Java system...

CVE-2022-43424

Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process...

Agent-to-controller security bypass vulnerability in compuware-xpediter-code-coverage

compuware-xpediter-code-coverage 1.0.7 and earlier implements an agent/controller message that does not limit where it can be executed. It allows attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process. NOTE: This vulnerability ...

CVE-2022-43424

CVE-2022-43424 affects the Jenkins Compuware Xpediter Code Coverage Plugin (versions 1.0.7 and earlier). The vulnerability arises from an agent/controller message that is not restricted where it can be executed, enabling an attacker who can control agent processes to read Java system properties f...

com.compuware.jenkins:compuware-scm-downloader (>=2.0.0, <=2.0.5), com.compuware.jenkins:compuware-topaz-for-total-test (>=2.0, <=2.3.7) +2 more potentially affected by CVE-2022-41226 via com.compuware.jenkins:compuware-common-configuration (>=1.0.2, <=1.0.8)

com.compuware.jenkins:compuware-common-configuration MAVEN version =1.0.2, =2.0.0, =2.0, =1.0.2, =1.0.0, =1.0.6 Source cves: CVE-2022-41226 Source advisory: GHSA-G43X-PCC9-F472...

com.compuware.jenkins:compuware-scm-downloader (>=2.0.0, <=2.0.5), com.compuware.jenkins:compuware-topaz-for-total-test (>=2.0, <=2.3.7) +2 more potentially affected by CVE-2022-41226 via com.compuware.jenkins:compuware-common-configuration (>=1.0.2, <=1.0.8)

com.compuware.jenkins:compuware-common-configuration MAVEN version =1.0.2, =2.0.0, =2.0, =1.0.2, =1.0.0, =1.0.6 Source cves: CVE-2022-41226 Source advisory: OSV:GHSA-G43X-PCC9-F472...

com.compuware.jenkins:compuware-scm-downloader (>=2.0.0, <=2.0.5), com.compuware.jenkins:compuware-topaz-for-total-test (>=2.0, <=2.3.7) +2 more potentially affected by CVE-2022-41226 via com.compuware.jenkins:compuware-common-configuration (>=1.0.2, <=1.0.8)

com.compuware.jenkins:compuware-common-configuration MAVEN version =1.0.2, =2.0.0, =2.0, =1.0.2, =1.0.0, =1.0.6 Source cves: CVE-2022-41226 Source advisory: MEND:CVE-2022-41226...

Jenkins Compuware Xpediter Code Coverage Plugin Auth Bypass

The vulnerability of the Jenkins Compuware Xpediter Code Coverage Plugin is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Jenkins Compuware Xpediter Code Coverage Plugin Missing Authorization

Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier does not perform permission checks in several HTTP endpoints. This allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins. Those...

GHSA-HXF7-9RV9-88V6 Jenkins Compuware Xpediter Code Coverage Plugin Missing Authorization

Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier does not perform permission checks in several HTTP endpoints. This allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins. Those...

CVE-2022-36897

A missing permission check in Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins...