CVE-2023-49238

Katalog CVE

CVSS 9.8 · Critical EPSS 0,77%

Kerentanan Weak Password Requirements pada gradle enterprise. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

In Gradle Enterprise before 2023.1, a remote attacker may be able to gain access to a new installation (in certain installation scenarios) because of a non-unique initial system user password. Although this password must be changed upon the first login, it is possible that an attacker logs in before the legitimate administrator logs in.

Rincian

Terbit di NVD

9 Januari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-521: Weak Password Requirements

EPSS (30 hari)

0,77% peluang dieksploitasi; lebih tinggi dari 54,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://security.gradle.com advisory vendor
• https://security.gradle.com/advisory/2023-01 advisory vendor
• https://security.netapp.com/advisory/ntap-20240216-0003/