[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f0ObYRVTlD6-jxVFOymL9QzlwT1TmhF_DThb9ckeiMb4":3,"g5a-risk:CVE-2020-2300":111},{"success":4,"data":5,"meta":109},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":61,"weaknesses":62,"weaknessesCount":48,"isActivelyExploited":71,"cisaInfo":27,"otxData":27,"relatedBlogPosts":72,"seoMetadata":73,"configurations":98,"relatedVendorCves":107,"notableEvents":108},"CVE-2020-2300","What is CVE-2020-2300?","Jenkins Active Directory Plugin 2.19 and earlier does not prohibit the use of an empty password in Windows\u002FADSI mode, which allows attackers to log in to Jenkins as any user depending on the configuration of the Active Directory server.","Jenkins Active Directory Plugin 2.19 and earlier does not prohibit the use of an empty password in Windows\u002FADSI mode, which allows attackers to log in to Jen...","2020-11-04T15:15:11.067","2023-10-25T18:16:42.26",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.01672,[39,39,39,39,39,39,39],"Critical",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"jenkins","active_directory","*","cpe:2.3:a:jenkins:active_directory:*:*:*:*:*:jenkins:*:*",1,[50,56],{"url":51,"source":52,"tags":53},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2020\u002F11\u002F04\u002F6","Openwall",[54,55],"Mailing List","Third Party Advisory",{"url":57,"source":58,"tags":59},"https:\u002F\u002Fwww.jenkins.io\u002Fsecurity\u002Fadvisory\u002F2020-11-04\u002F#SECURITY-2099","Jenkins",[60],"Vendor Advisory",2,[63],{"id":64,"name":65,"description":66,"extendedDescription":67,"status":68,"abstraction":69,"structure":70},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",false,[],{"title":74,"metaDescription":75,"keywords":76,"canonicalUrl":77,"structuredData":78},"What is CVE-2020-2300? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-2300, a critical severity cyber security vulnerability from 2020. Jenkins Active Directory Plugin 2.19 and earlier does no...","CVE-2020-2300, CVE-2020-2300 vulnerability, CVE-2020-2300 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, jenkins security, active_directory vulnerability","\u002Fwhat-is\u002Fcve-2020-2300",{"@context":79,"@type":80,"headline":74,"description":75,"datePublished":10,"dateModified":11,"author":81,"publisher":85,"about":89,"mainEntityOfPage":93,"articleSection":96,"keywords":97},"https:\u002F\u002Fschema.org","TechArticle",{"@type":82,"name":83,"url":84},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":82,"name":83,"url":84,"logo":86},{"@type":87,"url":88},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":90,"name":6,"description":91,"additionalType":92},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":94,"@id":95},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-2300","Cybersecurity","CVE-2020-2300, CVE-2020-2300 vulnerability, CVE-2020-2300 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[99],{"Operator":27,"Negate":27,"Nodes":100},[101],{"Operator":102,"Negate":27,"CPEMatch":103},"OR",[104],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":105,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":106},"2E24F613-6D6E-449B-AA35-263E411A8A0E","2.19",[],[],{"lastModified":11,"cacheTime":110,"version":33},1792353270224,{"score":112,"band":113,"action":114,"scoredAt":115},54,"Medium","Plan remediation","2026-10-16T06:49:46.772099+00:00"]