[com.datapipe.jenkins.plugins:hashicorp-vault-plugin] Improper credentials masking in Jenkins HashiCorp Vault Plugin

Jenkins HashiCorp Vault Plugin 3.7.0 and earlier does not mask Vault credentials in Pipeline build logs or in Pipeline step descriptions when Pipeline: Groovy Plugin 2.85 or later is installed.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-23109
• https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2213
• http://www.openwall.com/lists/oss-security/2022/01/12/6
• https://github.com/advisories/GHSA-h6x7-jq46-fp33