[org.jenkins-ci.plugins:active-directory] Authentication cache in Active Directory Jenkins Plugin allows logging in with any password

Jenkins Active Directory Plugin 2.19 and earlier allows attackers to log in as any user with any password while a successful authentication of that user is still in the optional cache when using Windows/ADSI mode.

References

• https://nvd.nist.gov/vuln/detail/CVE-2020-2301
• https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2123
• https://github.com/advisories/GHSA-954f-xw44-56r2