CVE-2022-43423

Katalog CVE

CVSS 5.3 · Medium EPSS 0,64%

Kerentanan Externally Controlled Reference to a Resource in Another Sphere pada jenkins compuware source code download for endevor, pds, and ispw. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin 2.0.12 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process.

Rincian

Terbit di NVD

19 Oktober 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-610: Externally Controlled Reference to a Resource in Another Sphere

EPSS (30 hari)

0,64% peluang dieksploitasi; lebih tinggi dari 49,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2622 advisory vendor
• http://www.openwall.com/lists/oss-security/2022/10/19/3 mailing list · advisory pihak ketiga