Jenkins Compuware zAdviser API Plugin <=1.0.3 Agent RCE
CVE-2022-36900 Published on July 27, 2022
Jenkins Compuware zAdviser API Plugin 1.0.3 and earlier does not restrict execution of a controller/agent message to agents, allowing attackers able to control agent processes to retrieve Java system properties.
Affected Versions
Jenkins project Jenkins Compuware zAdviser API Plugin:- Version unspecified, <= 1.0.3 is affected.
Exploit Probability
EPSS
1.07%
Percentile
64.29%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.