PT-2019-12287 · Gradle · Gradle Enterprise
CVE-2019-11402
·
Publicado
2019-04-21
·
Atualizado
2023-01-20
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Gradle Enterprise versions prior to 2018.5.3
Description
The issue concerns the storage of credentials in Build Cache Nodes. In Gradle Enterprise, these nodes did not store credentials at rest in an encrypted format.
Recommendations
For versions prior to 2018.5.3, update to version 2018.5.3 or later to ensure credentials are stored in an encrypted format at rest.
Correção
Insufficiently Protected Credentials
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Gradle Enterprise