Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2022-43428
CVE-2022-43428:
Java vulnerability analysis and mitigation
Overview
CVE-2022-43428 is a security vulnerability discovered in Jenkins Compuware Topaz for Total Test Plugin version 2.4.8 and earlier, disclosed on October 19, 2022. The vulnerability affects the plugin's agent/controller message implementation, specifically the RemoteSystemProperties functionality (Jenkins Advisory, NVD).
Technical details
The vulnerability stems from an implementation flaw where the plugin's agent/controller message does not properly limit where it can be executed. This security issue is specifically related to the RemoteSystemProperties functionality that fails to restrict execution locations. The vulnerability has been assigned a CVSS v3.1 severity rating of 5.3 (Medium) (NVD).
Impact
When exploited, this vulnerability allows attackers who have control over agent processes to obtain the values of Java system properties from the Jenkins controller process. This security bypass could potentially expose sensitive system information to unauthorized users (Jenkins Advisory).
Additional resources
Source: This report was generated using AI
Related Java vulnerabilities:
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management