Non évaluée
The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host. If that host returns a 30x redirect...
CVE-2019-15052
Première détection SecPulse
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2019-15052 gradle
- Ubuntu UBUNTU-CVE-2019-15052 gradle
Description d'origine La description telle que publiée par la source (souvent en anglais).
The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host. If that host returns a 30x redirect, Gradle also sends those credentials to all subsequent hosts that the request redirects to. This is similar to CVE-2018-1000007.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- patch github.com
- report github.com
- report github.com