CVE-2022-43430

Summary

Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected Software

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

• https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2625
• http://www.openwall.com/lists/oss-security/2022/10/19/3

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2625
• http://www.openwall.com/lists/oss-security/2022/10/19/3

• ←Previous
• Next→