Lucene search
Veracode Vulnerability DatabaseVERACODE:34272HistoryFeb 18, 2022 - 6:07 a.m.
Information Disclosure
2022-02-1806:07:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
26
0.001 Low
EPSS
Percentile
28.4%
hashicorp-vault-plugin is vulnerable to information disclosure. Remote unauthenticated attackers are able to gain access to sensitive information by controlling agent processes to obtain Vault secrets via an attacker-specified path and key.
| CPE | Name | Operator | Version |
|---|---|---|---|
| hashicorp vault plugin | le | 3.8.0 | |
| hashicorp vault plugin | le | 3.8.0 |
Related
cvelist
cvelist
CVE-2022-25186
2022-02-15 16:11:11
osv
osv
Agent-to-controller security bypass in Jenkins HashiCorp Vault Plugin
2022-02-16 00:01:28
nvd
nvd
CVE-2022-25186
2022-02-15 17:15:09
cnvd
cnvd
Jenkins HashiCorp Vault PluginδΏ‘ζ―ζ³ι²ζΌζ΄
2022-02-17 00:00:00
github
github
Agent-to-controller security bypass in Jenkins HashiCorp Vault Plugin
2022-02-16 00:01:28
prion
prion
Design/Logic Flaw
2022-02-15 17:15:00
cve
cve
CVE-2022-25186
2022-02-15 17:15:09
alpinelinux
alpinelinux
CVE-2022-25186
2022-02-15 17:15:09
