Lucene search
HistoryJul 27, 2022 - 3:15 p.m.
CVE-2022-36888
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
28.4%
A missing permission check in Jenkins HashiCorp Vault Plugin 354.vdb_858fd6b_f48 and earlier allows attackers with Overall/Read permission to obtain credentials stored in Vault with attacker-specified path and keys.
Affected configurations
Node
jenkinshashicorp_vaultRange≤354.vdb_858fd6b_f48jenkins
Related
alpinelinux
alpinelinux
CVE-2022-36888
2022-07-27 15:15:09
cvelist
cvelist
CVE-2022-36888
2022-07-27 14:22:14
cve
cve
CVE-2022-36888
2022-07-27 15:15:09
prion
prion
Design/Logic Flaw
2022-07-27 15:15:00
github
github
osv
osv
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
28.4%
Related for NVD:CVE-2022-36888