CVE-2019-11403 Information disclosure in n/a
An attacker can view the configured password in the HTML source of the settings page, exposing sensitive credentials.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-11403?
CVE-2019-11403 is a critical vulnerability in n/a, published on 21 Apr 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In Gradle Enterprise before 2018.5.2, Build Cache Nodes would reflect the configured password back when viewing the HTML page source of the settings page.
Weakness: CWE-200
Which versions are affected by CVE-2019-11403?
It affects 2 products.
Products include Gradle Build Cache Node, Gradle Enterprise.
How do I fix CVE-2019-11403?
No fix has been published for CVE-2019-11403 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-11403 being exploited?
There is no known exploitation of CVE-2019-11403 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-p2w2-rrf2-qqmj.