CVE-2019-1003074

CVE-2019-1003074 describes a critical vulnerability in the Jenkins Hyper.sh Commons Plugin where credentials are stored unencrypted in the global configuration file on the Jenkins master, making them accessible to users with file system access. This vulnerability carries a high CVSS score of 8.8, indicating a severe impact with high confidentiality, integrity, and availability compromise possible through a low-privilege network attack. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage.