Jenkins Project Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin

• CVE-2022-43423 Medium 5.3 Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin 2.0.12 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able 0.7%
• CVE-2022-36896 Unrated A missing permission check in Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin 2.0.12 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of 0.7%