CVE-2022-25186

Jenkins HashiCorp Vault Plugin 3.8.0 and earlier implements functionality that allows agent processes to retrieve any Vault secrets for use on the agent…

published February 15, 2022

CVSS
—
EPSS
1%
Percentile
56.4
In the wild
Unconfirmed
What it is

Jenkins HashiCorp Vault Plugin 3.8.0 and earlier implements functionality that allows agent processes to retrieve any Vault secrets for use on the agent, allowing attackers able to control agent processes to obtain Vault secrets for an attacker-specified path and key.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00809 · 56.4th percentile
Published
2022-02-15T16:11Z
EPSS history
Timeline
  • 15 FEB 16:11Z
    Jenkins HashiCorp Vault Plugin 3.8.0 and earlier implements functionality that allows agent processes to retrieve any Vault secrets for use on the agent…
    cvelistv5