CVE-2020-15775

An issue was discovered in Gradle Enterprise 2017.1 - 2020.2.4. The /usage page of Gradle Enterprise conveys high level build information such as project names and build counts over time. This page is incorrectly viewable anonymously.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 59%
VendorProductVersion
gradleenterprise
2017.1 ≤
𝑥
≤ 2020.2.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/gradle/gradle/security/advisories
https://security.gradle.com/advisory/CVE-2020-15775
https://github.com/gradle/gradle/security/advisories
https://security.gradle.com/advisory/CVE-2020-15775