CVE-2020-15774: Medium severity gradle enterprise vulnerability
Published Sep 18, 2020
·Updated
An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4. An attacker with physical access to the browser of a user who has recently logged in to Gradle Enterprise and since closed their browser could reopen their browser to access Gradle Enterprise as that user.
Affected Software
1 affected component
Gradle Enterprise>=2018.5<=2020.2.4
Event History
Sep 18, 2020
CVE Published
via MITRE·01:20 PM
Data Sourced
via MITRE·01:20 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue in Gradle Enterprise?
The vulnerability ID for this issue in Gradle Enterprise is CVE-2020-15774.
2
What is the severity of CVE-2020-15774?
The severity of CVE-2020-15774 is medium, with a CVSS score of 6.8.
3
In which versions of Gradle Enterprise does this vulnerability exist?
This vulnerability exists in Gradle Enterprise versions 2018.5 to 2020.2.4.
4
What is the impact of CVE-2020-15774?
CVE-2020-15774 allows an attacker with physical access to a user's browser to reopen the browser and gain access to Gradle Enterprise as the user.
5
Is there a fix available for CVE-2020-15774?
Yes, to mitigate this vulnerability, it is recommended to upgrade to a version of Gradle Enterprise beyond 2020.2.4.