{"id":"CVE-2025-67642","aliases":["EUVD-2025-202450","GHSA-3fm2-hx3h-xm4v"],"status":"published","title":"Jenkins HashiCorp Vault Plugin exposes system-scoped Vault credentials","description":"Jenkins HashiCorp Vault Plugin 371.v884a_4dd60fb_6 and earlier does not set the appropriate context for Vault credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Vault credentials they are not entitled to.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00248,"percentile":0.16177,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-282"],"published":"2025-12-10T16:50:40Z","modified":"2026-10-14T21:10:00Z","affected":[{"source":"ghsa","ecosystem":"Maven","package":"com.datapipe.jenkins.plugins:hashicorp-vault-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"371"}]}]},{"source":"osv","ecosystem":"Maven","package":"com.datapipe.jenkins.plugins:hashicorp-vault-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"371"}]}],"versions":["1.0","1.1","1.2","1.3","1.4","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.3.0","2.3.1","2.4.0","2.5.0","3.0.0","3.1.0","3.1.1","3.2.0","3.3.0","3.4.0","3.4.1","3.5.0","3.6.0","3.6.1","3.7.0","3.8.0","336.v182c0fbaaeb7","351.vdb_f83a_1c6a_9d","354.vdb_858fd6b_f48","355.v3b_38d767a_b_a_8","356.ved18810a_b_828","359.v2da_3b_45f17d5","360.v0a_1c04cf807d","361.v44fea_4fc08d9","362.v8dfe4061f29e","363.va_f8c1627db_b_a","364.vf5d54b_3dc313","366.v3b_57135510d6","367.v8a_1ee1cccf3a","368.v48134f694db_f","369.vd49b_f7441a_a_3","370.v946b_53544a_30"]}],"products":[{"vendor":"jenkins","product":"hashicorp_vault"},{"vendor":"jenkins project","product":"jenkins hashicorp vault plugin"}],"references":[{"url":"https://www.jenkins.io/security/advisory/2025-12-10/#SECURITY-3045","tags":["vendor-advisory","Vendor Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-67642","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-3fm2-hx3h-xm4v"},{"url":"https://github.com/jenkinsci/hashicorp-vault-plugin","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2025-67642","description":"Jenkins HashiCorp Vault Plugin 371.v884a_4dd60fb_6 and earlier does not set the appropriate context for Vault credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Vault credentials they are not entitled to.","status":"published","published":"2025-12-10T16:50:40.02Z","modified":"2025-12-10T17:23:56.323Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-282"],"updated_at":"2026-11-02T14:32:51.880027Z"}],"euvd":[{"id":"EUVD-2025-202450","description":"Jenkins HashiCorp Vault Plugin 371.v884a_4dd60fb_6 and earlier does not set the appropriate context for Vault credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Vault credentials they are not entitled to.","status":"published","published":"2025-12-10T16:50:40Z","modified":"2025-12-10T17:23:56Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T19:49:07.060478Z"}],"ghsa":[{"id":"GHSA-3fm2-hx3h-xm4v","title":"Jenkins HashiCorp Vault Plugin exposes system-scoped Vault credentials","description":"Jenkins HashiCorp Vault Plugin 371.v884a_4dd60fb_6 and earlier does not set the appropriate context for Vault credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Vault credentials they are not entitled to.","status":"published","published":"2025-12-10T18:30:27Z","modified":"2025-12-10T20:18:22Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-282"],"updated_at":"2026-11-02T14:39:12.222121Z"}],"nvd":[{"id":"CVE-2025-67642","description":"Jenkins HashiCorp Vault Plugin 371.v884a_4dd60fb_6 and earlier does not set the appropriate context for Vault credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Vault credentials they are not entitled to.","status":"published","published":"2025-12-10T17:15:56.75Z","modified":"2026-10-14T21:10:00.183Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-282"],"updated_at":"2026-11-02T14:11:49.468427Z"}],"osv":[{"id":"GHSA-3fm2-hx3h-xm4v","title":"Jenkins HashiCorp Vault Plugin exposes system-scoped Vault credentials","description":"Jenkins HashiCorp Vault Plugin 371.v884a_4dd60fb_6 and earlier does not set the appropriate context for Vault credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Vault credentials they are not entitled to.","status":"published","published":"2025-12-10T18:30:27Z","modified":"2025-12-10T20:41:14.479649Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-282"],"updated_at":"2026-11-02T15:46:35.747385Z"}]}}