AUGUST 5, 2026
Live Feed
Back to database
Case File

CVE-2020-2301

CRITICAL · CVSS 9.8 EPSS 1.70%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-11-04 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. It affects Windows, Jenkins.

CVE
CVE-2020-2301
Severity
CRITICAL
CVSS
9.8
EPSS
1.70%
Windows Jenkins

Original NVD Description

Jenkins Active Directory Plugin 2.19 and earlier allows attackers to log in as any user with any password while a successful authentication of that user is still in the optional cache when using Windows/ADSI mode.

Related CVEs

Other vulnerabilities affecting the same vendor(s)