CVE-2019-1003094

CVE-2019-1003094 describes a medium-severity vulnerability in the Jenkins Open STF Plugin, where credentials are stored unencrypted in the global configuration file on the Jenkins master. This allows authenticated users with file system access to view sensitive information, leading to a high impact on confidentiality. While the attack vector is network-based and low complexity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.