CVE-2019-11402: Critical severity gradle enterprise vulnerability
Published Apr 21, 2019
·Updated
In Gradle Enterprise before 2018.5.3, Build Cache Nodes did not store the credentials at rest in an encrypted format.
Affected Software
1 affected component
Gradle Enterprise<2018.5.3
Event History
Apr 21, 2019
CVE Published
via MITRE·04:06 PM
Data Sourced
via MITRE·04:06 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-11402?
The severity of CVE-2019-11402 is critical with a score of 9.8.
2
What is the vulnerability description of CVE-2019-11402?
CVE-2019-11402 is a vulnerability in Gradle Enterprise before version 2018.5.3 where Build Cache Nodes did not store credentials at rest in an encrypted format.
3
What software is affected by CVE-2019-11402?
The software affected by CVE-2019-11402 is Gradle Enterprise before version 2018.5.3.
4
How can I fix CVE-2019-11402?
To fix CVE-2019-11402, upgrade Gradle Enterprise to version 2018.5.3 or later.
5
What is the CWE of CVE-2019-11402?
The CWE of CVE-2019-11402 is CWE-522.