Jenkins Project Jenkins Compuware Topaz Utilities Plugin

• CVE-2022-43422 Medium 5.3 Jenkins Compuware Topaz Utilities Plugin 1.0.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to ob 0.8%
• CVE-2022-36895 Unrated A missing permission check in Jenkins Compuware Topaz Utilities Plugin 1.0.8 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and cred 0.7%