CVE-2022-25186
1 advisory.
Maven/com.datapipe.jenkins.plugins:hashicorp-vault-plugin CVE-2022-25186: low 3.1
Agent-to-controller security bypass in Jenkins HashiCorp Vault Plugin
Action: Upgrade com.datapipe.jenkins.plugins:hashicorp-vault-plugin to 336.v182c0fbaaeb7 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 336.v182c0fbaaeb7 | - |
Fixed versions
| 336.v182c0fbaaeb7 |
Sources
- osv: GHSA-fm6q-97gw-c4wh
- https://nvd.nist.gov/vuln/detail/CVE-2022-25186
- https://github.com/jenkinsci/hashicorp-vault-plugin
- https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2429
CVE-2022-25186 · published · modified · JSON