CVE-2022-43427: Jenkins Compuware Topaz For Total Test

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

Affected products

• Jenkins Compuware Topaz For Total Test: before 2.4.8 (fixed in 2.4.8)

Published 2022-10-19. Last modified 2026-06-17.