Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-25364
HistoryMar 17, 2022 - 5:15 p.m.

Default configuration

2022-03-1717:15:00
PRIOn knowledge base
www.prio-n.com
3

8.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.5%

In Gradle Enterprise before 2021.4.2, the default built-in build cache configuration allowed anonymous write access. If this was not manually changed, a malicious actor with network access to the build cache could potentially populate it with manipulated entries that execute malicious code as part of a build. As of 2021.4.2, the built-in build cache is inaccessible-by-default, requiring explicit configuration of its access-control settings before it can be used. (Remote build cache nodes are unaffected as they are inaccessible-by-default.)

CPENameOperatorVersion
enterpriselt2021.4.2

8.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.5%

Related for PRION:CVE-2022-25364