Description
Jenkins HashiCorp Vault Plugin 3.7.0 and earlier does not mask Vault credentials in Pipeline build logs or in Pipeline step descriptions when Pipeline: Groovy Plugin 2.85 or later is installed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jenkins project | Jenkins HashiCorp Vault Plugin | unspecified – ≤ 3.7.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.datapipe.jenkins.plugins:hashicorp-vault-plugin | < 3.8.0 | 3.8.0 | GHSA-h6x7-jq46-fp33 |