CVE-2020-15770 - An issue was discovered in Gradle Enterprise 2018.5. An attacker can potentially make repeated attem

CVE-2020-15770

Summary

An issue was discovered in Gradle Enterprise 2018.5. An attacker can potentially make repeated attempts to guess a local user's password, due to lack of lock-out after excessive failed logins.

References

https://security.gradle.com/advisory/CVE-2020-15770
https://github.com/gradle/gradle/security/advisories

Vulnerable Configurations

cpe:2.3:a:gradle:enterprise:2018.5:*:*:*:*:*:*:*
cpe:2.3:a:gradle:enterprise:2018.5:*:*:*:*:*:*:*

CVSS

Base:	2.1 (as of 30-09-2022 - 03:28)
Impact:
Exploitability:

CWE

CWE-307

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:N/A:N

refmap via4

confirm	https://security.gradle.com/advisory/CVE-2020-15770
misc	https://github.com/gradle/gradle/security/advisories

Last major update

30-09-2022 - 03:28

Published

18-09-2020 - 14:15

Last modified

30-09-2022 - 03:28