CVE-2022-36888

A missing permission check in Jenkins HashiCorp Vault Plugin 354.vdb_858fd6b_f48 and earlier allows attackers with Overall/Read permission to obtain credentials stored in Vault with attacker-specified path and keys.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:jenkins:hashicorp_vault:*:*:*:*:*:jenkins:*:*

Information

Published : 2022-07-27 08:15

Updated : 2022-08-03 10:07


NVD link : CVE-2022-36888

Mitre link : CVE-2022-36888


JSON object : View

CWE
CWE-862

Missing Authorization

Advertisement

dedicated server usa

Products Affected

jenkins

  • hashicorp_vault