Vulnerabilities > Gradle > Enterprise > 2022.3.2

DATE CVE VULNERABILITY TITLE RISK
2024-01-09 CVE-2023-49238 Weak Password Requirements vulnerability in Gradle Enterprise
In Gradle Enterprise before 2023.1, a remote attacker may be able to gain access to a new installation (in certain installation scenarios) because of a non-unique initial system user password.
network
low complexity
gradle CWE-521
critical
 9.8
9.8
2022-10-21 CVE-2022-41575 Insufficiently Protected Credentials vulnerability in Gradle Enterprise 2022.3.1/2022.3.2
A credential-exposure vulnerability in the support-bundle mechanism in Gradle Enterprise 2022.3 through 2022.3.3 allows remote attackers to access a subset of application data (e.g., cleartext credentials).
network
low complexity
gradle CWE-522
7.5
7.5