GitHub Advisoryadvisory · Maven

GHSA-2587-w93g-63m2 Agent-to-controller security bypass in Jenkins HashiCorp Vault Plugin allows reading arbitrary files

MEDIUM Published 2022-02-16 Modified 2022-12-01 Official page ↗
Aliases
CVE-2022-25197
Ecosystem
Maven
Packages
com.datapipe.jenkins.plugins:hashicorp-vault-plugin
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-693
Reviewed
2022-12-01

Affected packages

• Maven com.datapipe.jenkins.plugins:hashicorp-vault-plugin: < 351.vdb_f83a_1c6a_9d → fixed in 351.vdb_f83a_1c6a_9d

Description

Jenkins HashiCorp Vault Plugin 336.v182c0fbaaeb7 and earlier implements functionality that allows agent processes to read arbitrary files on the Jenkins controller file system. This allows attackers able to control agent processes to read arbitrary files on the Jenkins controller file system. This vulnerability is only exploitable in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier. See the LTS upgrade guide.

Related

Alias · CVE (1)

  • CVE-2022-25197 Jenkins HashiCorp Vault Plugin 336.v182c0fbaaeb7 and earlier implements functionality that allows agent processes to read arbitrary files… vulnerability

Weakness · CWE (1)

  • CWE-693 Protection Mechanism Failure weakness

References