Gradle Enterprise Build Cache Node Login Panel - Detect

Gradle Enterprise Build Cache Node login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Gradle Enterprise Build Cache Node login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

PT-2021-23352

Name of the Vulnerable Software and Affected Versions Gradle Enterprise versions prior to 2021.3 Enterprise Build Cache Node versions prior to 10.0 Description The issue concerns potential cache poisoning and remote code execution when running the build cache node with its default configuration,...

CVE-2020-15771: Missing Encryption of Sensitive Data

An issue was discovered in Gradle Enterprise 2018.2 and Gradle Enterprise Build Cache Node 4.1. Cross-site transmission of cookie containing CSRF token allows remote attacker to bypass CSRF mitigation...

CVE-2020-15768: Undefined Security Weakness

An issue was discovered in Gradle Enterprise 2017.3 - 2020.2.4 and Gradle Enterprise Build Cache Node 1.0 - 9.2. Unrestricted HTTP header reflection in Gradle Enterprise allows remote attackers to obtain authentication cookies, if they are able to discover a separate XSS vulnerability. This...

PT-2020-14618

Name of the Vulnerable Software and Affected Versions Gradle Enterprise version 2018.2 Gradle Enterprise Build Cache Node version 4.1 Description An issue allows a remote attacker to bypass CSRF mitigation due to cross-site transmission of a cookie containing a CSRF token. Recommendations For...