CVE-2019-11403: Infoleak
Published Apr 21, 2019
·Updated
In Gradle Enterprise before 2018.5.2, Build Cache Nodes would reflect the configured password back when viewing the HTML page source of the settings page.
Affected Software
2 affected components
Gradle Build Cache Node<5.2
Gradle Enterprise<2018.5.2
Event History
Apr 21, 2019
CVE Published
via MITRE·04:06 PM
Data Sourced
via MITRE·04:06 PM
Description
Frequently Asked Questions
1
What is CVE-2019-11403?
CVE-2019-11403 is a vulnerability in Gradle Enterprise before version 2018.5.2 that allows the configured password to be reflected back when viewing the HTML page source of the settings page.
2
How does CVE-2019-11403 affect Gradle Build Cache Node?
CVE-2019-11403 affects Gradle Build Cache Node versions up to but excluding 5.2.
3
How does CVE-2019-11403 affect Gradle Enterprise?
CVE-2019-11403 affects Gradle Enterprise versions up to but excluding 2018.5.2.
4
What is the severity of CVE-2019-11403?
CVE-2019-11403 has a severity rating of 9.8 (critical).
5
How can I fix CVE-2019-11403?
To fix CVE-2019-11403, update Gradle Build Cache Node to version 5.2 or higher, or update Gradle Enterprise to version 2018.5.2 or higher.