CVE-2019-1003051

CVE-2019-1003051 describes a critical vulnerability in the Jenkins IRC Plugin, where credentials are stored unencrypted in the global configuration file on the Jenkins master. This allows any user with file system access to the master to view sensitive authentication information. The vulnerability carries a high CVSS score of 8.8, indicating a severe risk due to its network-based attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation, publicly available exploit code, or significant community discussion, the unencrypted storage of credentials (CWE-311) presents a clear security risk.