CVE-2022-36896

Description

A missing permission check in Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin 2.0.12 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins.

CvssV3 impact

Could not find any metrics

CvssV2 impact

Could not find any metrics