PT-2020-14615 · Gradle · Gradle Enterprise Build Cache Node+1

Published 2020-09-18 · Updated 2022-09-30 · CVE-2020-15768

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Gradle Enterprise versions 2017.3 through 2020.2.4 Gradle Enterprise Build Cache Node versions 1.0 through 9.2

Description An issue in Gradle Enterprise allows remote attackers to obtain authentication cookies through unrestricted HTTP header reflection, potentially enabling them to impersonate another user if they can discover a separate XSS vulnerability. The affected application request paths in Gradle Enterprise include /info/headers, /cache-info/headers, /admin-info/headers, and /distribution-broker-info/headers. For Gradle Enterprise Build Cache Node, the affected path is /cache-node-info/headers.

Recommendations For Gradle Enterprise versions 2017.3 through 2020.2.4, consider restricting access to the affected application request paths until a patch is available. For Gradle Enterprise Build Cache Node versions 1.0 through 9.2, restrict access to the /cache-node-info/headers path to minimize the risk of exploitation. As a temporary workaround, consider disabling the reflection of HTTP headers in the affected paths for both Gradle Enterprise and Gradle Enterprise Build Cache Node until a patch is available.

Fix

Related Identifiers

CVE-2020-15768

Affected Products

Gradle Enterprise

Gradle Enterprise Build Cache Node

References · 4

• https://security.gradle.com/advisory/CVE-2020-15768 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-15768 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15768 · Security Note
• https://github.com/gradle/gradle/security/advisories · Note