CVE-2022-36896

A missing permission check in Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin 2.0.12 and earlier allows attackers with Overall/Read…

published July 27, 2022

CVSS
—
EPSS
1%
Percentile
54.2
In the wild
Unconfirmed
What it is

A missing permission check in Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin 2.0.12 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00744 · 54.2th percentile
Published
2022-07-27T14:23Z
EPSS history
Timeline
  • 27 JUL 14:23Z
    A missing permission check in Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin 2.0.12 and earlier allows attackers with Overall/Read…
    cvelistv5