AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-25186

MEDIUM · CVSS 6.5 EPSS 0.81%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-02-15 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2022-25186
Severity
MEDIUM
CVSS
6.5
EPSS
0.81%
Jenkins

Original NVD Description

Jenkins HashiCorp Vault Plugin 3.8.0 and earlier implements functionality that allows agent processes to retrieve any Vault secrets for use on the agent, allowing attackers able to control agent processes to obtain Vault secrets for an attacker-specified path and key.