CVE-2022-36888

A missing permission check in Jenkins HashiCorp Vault Plugin 354.vdb_858fd6b_f48 and earlier allows attackers with Overall/Read permission to obtain…

published July 27, 2022

CVSS
—
EPSS
1%
Percentile
53.5
In the wild
Unconfirmed
What it is

A missing permission check in Jenkins HashiCorp Vault Plugin 354.vdb_858fd6b_f48 and earlier allows attackers with Overall/Read permission to obtain credentials stored in Vault with attacker-specified path and keys.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00723 · 53.5th percentile
Published
2022-07-27T14:22Z
EPSS history
Timeline
  • 27 JUL 14:22Z
    A missing permission check in Jenkins HashiCorp Vault Plugin 354.vdb_858fd6b_f48 and earlier allows attackers with Overall/Read permission to obtain…
    cvelistv5