Vulnerabilities > CVE-2022-36900 - Unspecified vulnerability in Jenkins Compuware Zadviser API 1.0.3
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
LOW Integrity impact
HIGH Availability impact
NONE Summary
Jenkins Compuware zAdviser API Plugin 1.0.3 and earlier does not restrict execution of a controller/agent message to agents, allowing attackers able to control agent processes to retrieve Java system properties.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 4 |