CVE-2022-43429: Jenkins Compuware Topaz For Total Test

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to read arbitrary files on the Jenkins controller file system.

Affected products

• Jenkins Compuware Topaz For Total Test: up to and including 2.4.8

Published 2022-10-19. Last modified 2026-06-17.