CVE-2022-41248

Jenkins BigPanda Notifier Plugin 1.4.0 and earlier does not mask the BigPanda API key on the global configuration form, increasing the potential for attackers to observe and capture it.

• http://www.openwall.com/lists/oss-security/2022/09/21/5
  Mailing ListThird Party Advisory
• https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2243
  Vendor Advisory
• http://www.openwall.com/lists/oss-security/2022/09/21/5
  Mailing ListThird Party Advisory
• https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2243
  Vendor Advisory