Not rated
CVE-2022-25197 Jenkins HashiCorp Vault Plugin 336.v182c0fbaaeb7 and earlier implements functionality that allows agent processes to…
Description
Jenkins HashiCorp Vault Plugin 336.v182c0fbaaeb7 and earlier implements functionality that allows agent processes to read arbitrary files on the Jenkins controller file system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins HashiCorp Vault Plugin 336 | earliest → 336.v182c0fbaaeb7 | No fix stated |
Other CVEs of Jenkins HashiCorp Vault Plugin
The 6 CVEs of Jenkins HashiCorp Vault Plugin →
CVE-2025-67642
Jenkins HashiCorp Vault Plugin 371.v884a_4dd60fb_6 and earlier does not set the appropriate context for Vault…
4.3
Medium
CVE-2023-33001
Jenkins HashiCorp Vault Plugin 360.v0a_1c04cf807d and earlier does not properly mask (i.e., replace with asterisks)…
7.5
High
CVE-2022-36888
A missing permission check in Jenkins HashiCorp Vault Plugin 354.vdb_858fd6b_f48 and earlier allows attackers with…
Not rated
CVE-2022-25186
Jenkins HashiCorp Vault Plugin 3.8.0 and earlier implements functionality that allows agent processes to retrieve any…
Not rated