CVE-2019-10433

CVE-2019-10433 describes a low-severity vulnerability in the Jenkins Dingding Plugin where credentials are stored unencrypted in job configuration files. This allows users with extended read permissions or file system access to the Jenkins master to view sensitive information, leading to a potential compromise of confidentiality. The attack vector is local, requires low privileges, and has no impact on integrity or availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.