CVE-2022-36898

A missing permission check in Jenkins Compuware ISPW Operations Plugin 1.0.8 and earlier allows attackers with Overall/Read permission to enumerate hosts and…

published July 27, 2022

CVSS
—
EPSS
1%
Percentile
52.4
In the wild
Unconfirmed
What it is

A missing permission check in Jenkins Compuware ISPW Operations Plugin 1.0.8 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00695 · 52.4th percentile
Published
2022-07-27T14:24Z
EPSS history
Timeline
  • 27 JUL 14:24Z
    A missing permission check in Jenkins Compuware ISPW Operations Plugin 1.0.8 and earlier allows attackers with Overall/Read permission to enumerate hosts and…
    cvelistv5