CVE-2022-23109: Jenkins Hashicorp Vault

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

Jenkins HashiCorp Vault Plugin 3.7.0 and earlier does not mask Vault credentials in Pipeline build logs or in Pipeline step descriptions when Pipeline: Groovy Plugin 2.85 or later is installed.

Affected products

• Jenkins Hashicorp Vault: up to and including 3.7.0

Published 2022-01-12. Last modified 2026-06-17.