Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process.
References
| Link | Resource |
|---|---|
| http://www.openwall.com/lists/oss-security/2022/10/19/3 | Mailing List Third Party Advisory |
| https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2627 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
03 Nov 2023, 01:24
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Jenkins compuware Xpediter Code Coverage
|
|
| CPE | cpe:2.3:a:jenkins:compuware_xpediter_code_coverage:*:*:*:*:*:jenkins:*:* | |
| CWE | NVD-CWE-noinfo |
25 Oct 2023, 18:17
| Type | Values Removed | Values Added |
|---|---|---|
| CWE |
22 Oct 2022, 02:07
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Jenkins compuware Xpediter Code
Jenkins jenkins Jenkins |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
| CPE | cpe:2.3:a:jenkins:compuware_xpediter_code:*:*:*:*:*:wordpress:*:* cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:* cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:* |
|
| References | (MLIST) http://www.openwall.com/lists/oss-security/2022/10/19/3 - Mailing List, Third Party Advisory | |
| References | (CONFIRM) https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2627 - Vendor Advisory |
19 Oct 2022, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
19 Oct 2022, 16:38
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-10-19 16:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-43424
Mitre link : CVE-2022-43424
CVE.ORG link : CVE-2022-43424
JSON object : View
Products Affected
jenkins
- compuware_xpediter_code_coverage
- jenkins
CWE