Input validation

2022-10-1916:15:00

PRIOn knowledge base

www.prio-n.com

jenkins

compuware

topaz

total test plugin

security vulnerability

nvd

java system properties

agent/controller message

input validation

0.001 Low

EPSS

Percentile

33.5%

JSON

Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process.

CPENameOperatorVersion
compuware_topaz_for_total_testle2.4.8

CPE	Name	Operator	Version
	compuware_topaz_for_total_test	le	2.4.8

References

www.openwall.com/lists/oss-security/2022/10/19/3

www.jenkins.io/security/advisory/2022-10-19/

0.001 Low

EPSS

Percentile

33.5%

JSON

Related for PRION:CVE-2022-43428