Vulnerabilities > Gradle > Enterprise > 2018.5

DATE CVE VULNERABILITY TITLE RISK
2020-09-18 CVE-2020-15767 Missing Encryption of Sensitive Data vulnerability in Gradle Enterprise
An issue was discovered in Gradle Enterprise before 2020.2.5.
network
high complexity
gradle CWE-311
5.3
2019-04-22 CVE-2019-11403 Information Exposure vulnerability in Gradle Build Cache Node and Enterprise
In Gradle Enterprise before 2018.5.2, Build Cache Nodes would reflect the configured password back when viewing the HTML page source of the settings page.
network
low complexity
gradle CWE-200
critical
9.8
2019-04-22 CVE-2019-11402 Insufficiently Protected Credentials vulnerability in Gradle Enterprise
In Gradle Enterprise before 2018.5.3, Build Cache Nodes did not store the credentials at rest in an encrypted format.
network
low complexity
gradle CWE-522
critical
9.8