CVE-2022-27919

概要

参考情報

• security.gradle.com/advisory/2022-05 · Mitigation

enterprise のその他の脆弱性

• CVE-2023-49238緊急 9.8In Gradle Enterprise before 2023.1, a remote attacker may be able to gain access to a new installation (in certain installation scenarios) b…
• CVE-2022-41575高 7.5A credential-exposure vulnerability in the support-bundle mechanism in Gradle Enterprise 2022.3 through 2022.3.3 allows remote attackers to …
• CVE-2022-41574高 7.5An access-control vulnerability in Gradle Enterprise 2022.4 through 2022.3.1 allows remote attackers to prevent backups from occurring, and …
• CVE-2022-25364高 8.1In Gradle Enterprise before 2021.4.2, the default built-in build cache configuration allowed anonymous write access. If this was not manuall…
• CVE-2022-27225中 6.5Gradle Enterprise before 2021.4.3 relies on cleartext data transmission in some situations. It uses Keycloak for identity management service…