CVE-2022-36899 Vulnerability in maven package com.compuware.jenkins:compuware-ispw-operations

Description

Jenkins Compuware ISPW Operations Plugin 1.0.8 and earlier does not restrict execution of a controller/agent message to agents, allowing attackers able to control agent processes to retrieve Java system properties.

Remediation

References

https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2629

http://www.openwall.com/lists/oss-security/2022/07/27/1

Related Vulnerabilities

CVE-2022-4147 Vulnerability in maven package io.quarkus:quarkus-vertx-http

CVE-2023-22894 Vulnerability in npm package @strapi/strapi

CVE-2022-0868 Vulnerability in npm package urijs

CVE-2022-36910 Vulnerability in maven package org.jenkins-ci.plugins:lucene-search

CVE-2021-40663 Vulnerability in npm package deep.assign

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N