← Back to CVE List

CVE-2020-2300

Published: 2020-11-04T15:15Z
Last Modified: 2024-11-21T05:25Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Jenkins Active Directory Plugin 2.19 and earlier does not prohibit the use of an empty password in Windows/ADSI mode, which allows attackers to log in to Jenkins as any user depending on the configuration of the Active Directory server. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt