CVE-2025-67642

Jenkins HashiCorp Vault Plugin 371.v884a4dd60fb6 and earlier does not set the appropriate context for Vault credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Vault credentials they are not entitled to...

CVE-2025-67642

creationtimestamp| type| source ---|---|--- 2025-12-10 17:58:55+00:00| seen| https://gist.github.com/Darkcrai86/34f9316cc7a8a9b3ea9489046423a811 2025-12-10 19:01:05+00:00| seen| https://gist.github.com/Darkcrai86/4d0818cdd67d90189484f183eed8caa1...

CVE-2025-67642

Jenkins HashiCorp Vault Plugin 371.v884a4dd60fb6 and earlier does not set the appropriate context for Vault credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Vault credentials they are not entitled to...