CVE-2019-10424

CVE-2019-10424 describes a vulnerability in the Jenkins elOyente Plugin where credentials are stored unencrypted in the global configuration file on the Jenkins master, making them accessible to users with file system access. This medium-severity vulnerability (CVSS 5.5) has a local attack vector with low complexity, allowing an authenticated attacker to achieve high confidentiality impact by viewing sensitive credentials. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, indicating a low current threat landscape.