Jenkins Project Jenkins Compuware Xpediter Code Coverage Plugin

• CVE-2022-43424 Medium 5.3 Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processe 0.8%
• CVE-2022-36897 Unrated A missing permission check in Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations a 0.7%