Skip to content
Sign in
5.3 Medium

CVE-2022-41248 Jenkins BigPanda Notifier Plugin 1.4.0 and earlier does not mask the BigPanda API key on the global configuration…

Description

Jenkins BigPanda Notifier Plugin 1.4.0 and earlier does not mask the BigPanda API key on the global configuration form, increasing the potential for attackers to observe and capture it.

Affected products and versions

Product Affected versions Fixed in
Jenkins BigPanda Notifier Plugin 1.4 earliest → 1.4.0 No fix stated

Other CVEs of Jenkins BigPanda Notifier Plugin

The 2 CVEs of Jenkins BigPanda Notifier Plugin →
CVE-2022-41247 Jenkins BigPanda Notifier Plugin 1.4.0 and earlier stores the BigPanda API key unencrypted in its global configuration… 4.3 Medium
Track this CVE