← CVE Intelligence

CVE-2020-2301

Jenkins project / Jenkins Active Directory Plugin PUBLISHED

Description (CNA)

Jenkins Active Directory Plugin 2.19 and earlier allows attackers to log in as any user with any password while a successful authentication of that user is still in the optional cache when using Windows/ADSI mode.

Affected (CNA)

Vendor / productVersions
Jenkins project / Jenkins Active Directory Pluginaffected unspecified through 2.19; unaffected 2.16.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.