Hashicorp Vault (Jenkins) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 27 known versions, newest CVE from 2025-12-10. Vendor: Jenkins.

CVEs of Hashicorp Vault

• CVE-2025-67642 - CVSS 4.3 (medium), 2025-12-10: Jenkins HashiCorp Vault Plugin 371.v884a_4dd60fb_6 and earlier does not set the appropriate context for Vault credentials lookup, allowing attackers with…
• CVE-2023-33001 - CVSS 7.5 (high), 2023-05-16: Jenkins HashiCorp Vault Plugin 360.v0a_1c04cf807d and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push…
• CVE-2022-36888 - CVSS 6.5 (medium), 2022-07-27: A missing permission check in Jenkins HashiCorp Vault Plugin 354.vdb_858fd6b_f48 and earlier allows attackers with Overall/Read permission to obtain…
• CVE-2022-25197 - CVSS 6.5 (medium), 2022-02-15: Jenkins HashiCorp Vault Plugin 336.v182c0fbaaeb7 and earlier implements functionality that allows agent processes to read arbitrary files on the Jenkins…
• CVE-2022-25186 - CVSS 6.5 (medium), 2022-02-15: Jenkins HashiCorp Vault Plugin 3.8.0 and earlier implements functionality that allows agent processes to retrieve any Vault secrets for use on the agent,…
• CVE-2022-23109 - CVSS 6.5 (medium), 2022-01-12: Jenkins HashiCorp Vault Plugin 3.7.0 and earlier does not mask Vault credentials in Pipeline build logs or in Pipeline step descriptions when Pipeline: Groovy…