CVE-2022-43422

—

CVSS 3.1

5.3 medium

EPSS

<1%p51

Published

Oct 19, 2022 (Oct 19, 2022)

Modified

Jun 17, 2026

Description

Jenkins Compuware Topaz Utilities Plugin 1.0.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process.

Vendors: jenkins
Products: compuware topaz utilities
Weakness: CWE-693
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.