Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Jenkins Compuware Topaz for Total Test Plugin unspecified Clear all filters
TI-2022-21224 CVE-2022-43429 · GHSA-7fvj-g3wp-29g8

Improper access control in Jenkins Compuware Topaz for Total Test Plugin

Priority MEDIUM 40

Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to read arbitrary fi…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00741 Published 2022-10-19 No fix listed CWE-284
TI-2022-21223 CVE-2022-43428 · GHSA-xp3r-9wx8-q2mm

Protection mechanism failure in Jenkins Compuware Topaz for Total Test Plugin

Priority LOW 31

Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00799 Published 2022-10-19 Fixed in 2.4.9 CWE-610
TI-2022-21222 CVE-2022-43427 · GHSA-x5gv-5rqv-654m

Missing authorization in Jenkins Compuware Topaz for Total Test Plugin

Priority LOW 21

Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials st…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00565 Published 2022-10-19 Fixed in 2.4.9 CWE-862