Jenkins Statistics Gatherer Plugin 2.0.3 and earlier does not mask the AWS Secret Key on the global configuration form, increasing the potential for attackers to observe and capture it.Referenceshttps://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3554
