Description (CNA)
Jenkins HashiCorp Vault Plugin 3.8.0 and earlier implements functionality that allows agent processes to retrieve any Vault secrets for use on the agent, allowing attackers able to control agent processes to obtain Vault secrets for an attacker-specified path and key.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Jenkins project / Jenkins HashiCorp Vault Plugin | affected unspecified through 3.8.0 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.