Security Advisory
CVE-2020-2300
9.8
CRITICAL
Vulnerability Description
Jenkins Active Directory Plugin 2.19 and earlier does not prohibit the use of an empty password in Windows/ADSI mode, which allows attackers to log in to Jenkins as any user depending on the configuration of the Active Directory server.
Published Date
November 4, 2020
Official Source
NIST NVD Advisory