2017.3

DATE	CVE	VULNERABILITY TITLE	RISK
2024-01-09	CVE-2023-49238	Weak Password Requirements vulnerability in Gradle Enterprise In Gradle Enterprise before 2023.1, a remote attacker may be able to gain access to a new installation (in certain installation scenarios) because of a non-unique initial system user password. network low complexity gradle CWE-521 critical	9.8
2022-03-17	CVE-2022-25364	Incorrect Default Permissions vulnerability in Gradle Enterprise In Gradle Enterprise before 2021.4.2, the default built-in build cache configuration allowed anonymous write access. network high complexity gradle CWE-276	8.1
2021-10-27	CVE-2021-41589	Incorrect Permission Assignment for Critical Resource vulnerability in Gradle Build Cache Node and Enterprise In Gradle Enterprise before 2021.3 (and Enterprise Build Cache Node before 10.0), there is potential cache poisoning and remote code execution when running the build cache node with its default configuration. network low complexity gradle CWE-732	7.5
2020-09-18	CVE-2020-15773	Origin Validation Error vulnerability in Gradle Enterprise An issue was discovered in Gradle Enterprise before 2020.2.4. network low complexity gradle CWE-346	4.0
2020-09-18	CVE-2020-15775	Insecure Storage of Sensitive Information vulnerability in Gradle Enterprise An issue was discovered in Gradle Enterprise 2017.1 - 2020.2.4. network low complexity gradle CWE-922	7.5
2020-09-18	CVE-2020-15768	Unspecified vulnerability in Gradle Enterprise and Enterprise Cache Node An issue was discovered in Gradle Enterprise 2017.3 - 2020.2.4 and Gradle Enterprise Build Cache Node 1.0 - 9.2. network low complexity gradle	7.5
2020-09-18	CVE-2020-15767	Missing Encryption of Sensitive Data vulnerability in Gradle Enterprise An issue was discovered in Gradle Enterprise before 2020.2.5. network high complexity gradle CWE-311	2.6
2019-04-22	CVE-2019-11403	Information Exposure vulnerability in Gradle Build Cache Node and Enterprise In Gradle Enterprise before 2018.5.2, Build Cache Nodes would reflect the configured password back when viewing the HTML page source of the settings page. network low complexity gradle CWE-200 critical	9.8
2019-04-22	CVE-2019-11402	Insufficiently Protected Credentials vulnerability in Gradle Enterprise In Gradle Enterprise before 2018.5.3, Build Cache Nodes did not store the credentials at rest in an encrypted format. network low complexity gradle CWE-522 critical	9.8