Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-43429

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-7fvj-g3wp-29g8

Jenkins Compuware Topaz for Total Test Plugin vulnerable to Protection Mechanism Failure Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to read arbitrary files on the Jenkins controller file system.

gitlab/maven/com.compuware.jenkins/compuware-topaz-for-total-test/CVE-2022-43429

Protection Mechanism Failure Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to read arbitrary files on the Jenkins controller file system.