← Database

CVE-2022-25186

MEDIUM CVSS: 6.5 Published: 2022-02-15 Modified: 2026-06-17

Description

Jenkins HashiCorp Vault Plugin 3.8.0 and earlier implements functionality that allows agent processes to retrieve any Vault secrets for use on the agent, allowing attackers able to control agent processes to obtain Vault secrets for an attacker-specified path and key.

Affected Platforms

Jenkins Hashicorp Vault

Weakness Type

NVD-CWE-noinfo

References