CVE-2019-16370: Use of a Broken or Risky Cryptographic Algorithm

The PGP signing plugin in Gradle before 6.0 relies on the SHA-1 algorithm, which might allow an attacker to replace an artifact with a different one that has the same SHA-1 message digest, a related issue to CVE-2005-4900...

PT-2019-14647

Name of the Vulnerable Software and Affected Versions Gradle versions prior to 6.0 Description The PGP signing plugin in Gradle relies on the SHA-1 algorithm, which might allow an attacker to replace an artifact with a different one that has the same SHA-1 message digest. Recommendations For...

Fedora 30 : gradle (2019-1b6383acdd)

Resolves CVE-2019-11065. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Securit...

Fedora Update for gradle FEDORA-2019-1b6383acdd

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 30 Update: gradle-4.4.1-4.fc30

Gradle is build automation evolved. Gradle can automate the building, testing, publishing, deployment and more of software packages or other types of projects such as generated static websites, generated documentation or indeed anything else. Gradle combines the power and flexibility of Ant with...

DEBIAN-CVE-2019-15052

The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host. If that host returns a 30x redirect, Gradle also sends those credentials to all subsequent hosts that the request redirects to. This is similar to CVE-2018-1000007...

CVE-2019-15052

The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host. If that host returns a 30x redirect, Gradle also sends those credentials to all subsequent hosts that the request redirects to. This is similar to CVE-2018-1000007...

CVE-2019-15052

The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host. If that host returns a 30x redirect, Gradle also sends those credentials to all subsequent hosts that the request redirects to. This is similar to CVE-2018-1000007...

UBUNTU-CVE-2019-15052

The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host. If that host returns a 30x redirect, Gradle also sends those credentials to all subsequent hosts that the request redirects to. This is similar to CVE-2018-1000007...

Design/Logic Flaw

The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host. If that host returns a 30x redirect, Gradle also sends those credentials to all subsequent hosts that the request redirects to. This is similar to CVE-2018-1000007...

CVE-2019-15052

The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host. If that host returns a 30x redirect, Gradle also sends those credentials to all subsequent hosts that the request redirects to. This is similar to CVE-2018-1000007...

CVE-2019-15052

CVE-2019-15052 : The HTTP client in Gradle before 5.6 may leak credentials by sending authentication data intended for the configured host to subsequent hosts when a 30x redirect occurs. This mirrors the behavior described for CVE-2018-1000007 and is limited to the Gradle HTTP client as described...

CVE-2019-15052

The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host. If that host returns a 30x redirect, Gradle also sends those credentials to all subsequent hosts that the request redirects to. This is similar to CVE-2018-1000007...

CVE-2019-15052

The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host. If that host returns a 30x redirect, Gradle also sends those credentials to all subsequent hosts that the request redirects to. This is similar to CVE-2018-1000007...

CVE-2019-15052

The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host. If that host returns a 30x redirect, Gradle also sends those credentials to all subsequent hosts that the request redirects to. This is similar to CVE-2018-1000007...

CVE-2019-15052: Insufficiently Protected Credentials

The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host. If that host returns a 30x redirect, Gradle also sends those credentials to all subsequent hosts that the request redirects to. This is similar to CVE-2018-1000007...

PT-2019-13959 · Gradle +2 · Gradle +2

Name of the Vulnerable Software and Affected Versions: Gradle versions prior to 5.6 Description: The issue concerns the HTTP client in Gradle, which sends authentication credentials to subsequent hosts after a 30x redirect, potentially exposing sensitive information. This behavior is similar to a...

Improper Restriction of XML External Entity Reference in DiffPlug Spotless

In DiffPlug Spotless before 1.20.0 library and Maven plugin and before 3.20.0 Gradle plugin, the XML parser would resolve external entities over both HTTP and HTTPS and didn't respect the resolveExternalEntities setting. For example, this allows disclosure of file contents to a MITM attacker if a...

com.bonitasoft.gradle.bonita-formatting:com.bonitasoft.gradle.bonita-formatting.gradle.plugin (>=0.1.37, <=0.1.43), com.bonitasoft.gradle.bonita-release:com.bonitasoft.gradle.bonita-release.gradle.plugin (>=0.1.37, <=0.1.43) +26 more potentially affected by CVE-2019-9843 via com.diffplug.spotless:spotless-plugin-gradle (>=3.0.0.beta2, <=3.19.0)

com.diffplug.spotless:spotless-plugin-gradle MAVEN version =3.0.0.beta2, =0.1.37, =0.1.37, =0.1.37, =0.1.37, =0.1.37, =0.1.37, =0.1.37, =0.1.37, =3.0.0.beta2, =0.2, =0...

com.bonitasoft.gradle.bonita-formatting:com.bonitasoft.gradle.bonita-formatting.gradle.plugin (>=0.1.37, <=0.1.43), com.bonitasoft.gradle.bonita-release:com.bonitasoft.gradle.bonita-release.gradle.plugin (>=0.1.37, <=0.1.43) +26 more potentially affected by CVE-2019-9843 via com.diffplug.spotless:spotless-plugin-gradle (>=3.0.0.beta2, <=3.19.0)

com.diffplug.spotless:spotless-plugin-gradle MAVEN version =3.0.0.beta2, =0.1.37, =0.1.37, =0.1.37, =0.1.37, =0.1.37, =0.1.37, =0.1.37, =0.1.37, =3.0.0.beta2, =0.2, =0...