high7.5
CVE-2022-43429
Jenkins Compuware Topaz for Total Test Plugin vulnerable to Protection Mechanism Failure
Impact
Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to read arbitrary files on the Jenkins controller file system.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | com.compuware.jenkins:compuware-topaz-for-total-test | <= 2.4.8 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Compuware Topaz For Total Test | through 2.4.8 |