{"action":"Upgrade com.compuware.jenkins:compuware-ispw-operations to 1.0.9 or later.","affected":[{"fixed":"1.0.9","introduced":"0"}],"component":"com.compuware.jenkins:compuware-ispw-operations","cve_ids":["CVE-2022-36898"],"ecosystem":"Maven","epss":0.00695,"exploited":false,"fixed_versions":["1.0.9"],"ghsa_id":"GHSA-cp5r-xqjr-84gm","id":"tcs_01M5N8SVWW94MZ9FHKSE6A2ZNG","modified_at":"2024-02-16T08:21:14.209738Z","published_at":"2022-07-28T00:00:42Z","references":["https://osv.dev/vulnerability/GHSA-cp5r-xqjr-84gm","https://nvd.nist.gov/vuln/detail/CVE-2022-36898","https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2628","http://www.openwall.com/lists/oss-security/2022/07/27/1"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-cp5r-xqjr-84gm","url":"https://osv.dev/vulnerability/GHSA-cp5r-xqjr-84gm"}],"summary":"Jenkins Compuware ISPW Operations Plugin does not perform permission checks in several HTTP endpoints"}