~ / search / GHSA-7fvj-g3wp-29g8

GHSA-7fvj-g3wp-29g8

Jenkins Compuware Topaz for Total Test Plugin vulnerable to Protection Mechanism Failure

Source: GitHub Advisory Database (reviewed) High CVE-2022-43429

Packages

EcosystemPackageAffectedFixed in
Maven com.compuware.jenkins:compuware-topaz-for-total-test <= 2.4.8 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to read arbitrary files on the Jenkins controller file system.

References

External links from the advisory. They lead to third-party sites.