GCVE - cpe:2.3:a:jenkins_project:jenkins_bigpanda_notifier

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins_project:jenkins_bigpanda_notifier_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Jenkins Project (`860cd631-1316-551d-89a3-5aa9a0d4f462`)
Product	Jenkins Bigpanda Notifier Plugin (`df915196-041a-590d-8a68-e444a25c11b5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-41248`	vulnerable	2026-06-08 05:48:30.069137	Details available Jenkins BigPanda Notifier Plugin 1.4.0 and earlier does not mask the BigPanda API key on the global configuration form, increasing the potential for attackers to observe and capture it. Published: 2022-09-21T15:46:06.000Z Updated: 2025-05-27T18:24:55.247Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2243 http://www.openwall.com/lists/oss-security/2022/09/21/5	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-41247`	vulnerable	2026-06-08 05:48:30.067966	Details available Jenkins BigPanda Notifier Plugin 1.4.0 and earlier stores the BigPanda API key unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system. Published: 2022-09-21T15:46:05.000Z Updated: 2025-05-27T18:24:13.463Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2243	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.