Design/Logic Flaw

2022-10-1916:15:00

PRIOn knowledge base

www.prio-n.com

jenkins

compuware

source code download

endevor

pds

ispw plugin

security vulnerability

java system properties

0.001 Low

EPSS

Percentile

33.5%

JSON

Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin 2.0.12 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process.

CPENameOperatorVersion
compuware_source_code_download_for_endevor\\,_pds\\,_and_ispwlt2.0.13

CPE	Name	Operator	Version
	compuware_source_code_download_for_endevor\\,_pds\\,_and_ispw	lt	2.0.13

References

www.openwall.com/lists/oss-security/2022/10/19/3

www.jenkins.io/security/advisory/2022-10-19/

0.001 Low

EPSS

Percentile

33.5%

JSON

Related for PRION:CVE-2022-43423