[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxBDIiYtZdrwG3z1ZFcj_o6dDcOVtEmVaPlXUlJ3qAHc":3,"g5a-risk:CVE-2020-26542":117},{"success":4,"data":5,"meta":115},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":67,"weaknesses":68,"weaknessesCount":48,"isActivelyExploited":77,"cisaInfo":27,"otxData":27,"relatedBlogPosts":78,"seoMetadata":79,"configurations":104,"relatedVendorCves":113,"notableEvents":114},"CVE-2020-26542","What is CVE-2020-26542?","An issue was discovered in the MongoDB Simple LDAP plugin through 2020-10-02 for Percona Server when using the SimpleLDAP authentication in conjunction with Microsoft’s Active Directory, Percona has discovered a flaw that would allow authentication to complete when passing a blank value for the account password, leading to access against the service integrated with which Active Directory is deployed at the level granted to the authenticating account.","An issue was discovered in the MongoDB Simple LDAP plugin through 2020-10-02 for Percona Server when using the SimpleLDAP authentication in conjunction with ...","2020-11-09T20:15:13.323","2020-11-23T20:50:30.333",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.01538,[39,39,39,39,39,39,39],"Critical",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"percona","percona_server","*","cpe:2.3:a:percona:percona_server:*:*:*:*:*:mongodb:*:*",1,[50,57,60,64],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fjira.percona.com\u002Fbrowse\u002FPS-7358","Percona",[54,55,56],"Issue Tracking","Permissions Required","Vendor Advisory",{"url":58,"source":52,"tags":59},"https:\u002F\u002Fjira.percona.com\u002Fbrowse\u002FPSMDB-726",[54,55,56],{"url":61,"source":52,"tags":62},"https:\u002F\u002Fwww.percona.com\u002Fblog\u002F2020\u002F10\u002F13\u002Fpercona-distribution-for-mysql-pxc-variant-8-0-20-fixes-for-security-vulnerability-release-roundup-october-13-2020\u002F",[63,56],"Release Notes",{"url":65,"source":52,"tags":66},"https:\u002F\u002Fwww.percona.com\u002Fdoc\u002Fpercona-distribution-mysql\u002F8.0\u002Frelease-notes-pxc-v8.0.20.upd2.html",[63,56],4,[69],{"id":70,"name":71,"description":72,"extendedDescription":73,"status":74,"abstraction":75,"structure":76},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",false,[],{"title":80,"metaDescription":81,"keywords":82,"canonicalUrl":83,"structuredData":84},"What is CVE-2020-26542? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-26542, a critical severity cyber security vulnerability from 2020. An issue was discovered in the MongoDB Simple LDAP plug...","CVE-2020-26542, CVE-2020-26542 vulnerability, CVE-2020-26542 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, percona security, percona_server vulnerability","\u002Fwhat-is\u002Fcve-2020-26542",{"@context":85,"@type":86,"headline":80,"description":81,"datePublished":10,"dateModified":11,"author":87,"publisher":91,"about":95,"mainEntityOfPage":99,"articleSection":102,"keywords":103},"https:\u002F\u002Fschema.org","TechArticle",{"@type":88,"name":89,"url":90},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":88,"name":89,"url":90,"logo":92},{"@type":93,"url":94},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":96,"name":6,"description":97,"additionalType":98},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":100,"@id":101},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-26542","Cybersecurity","CVE-2020-26542, CVE-2020-26542 vulnerability, CVE-2020-26542 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[105],{"Operator":27,"Negate":27,"Nodes":106},[107],{"Operator":108,"Negate":27,"CPEMatch":109},"OR",[110],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":111,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":112},"DAB472BD-C3B3-490A-AAB6-A57B46934EE1","2020-10-02",[],[],{"lastModified":11,"cacheTime":116,"version":33},1792243353400,{"score":118,"band":119,"action":120,"scoredAt":121},54,"Medium","Plan remediation","2026-10-16T06:49:50.327367+00:00"]