Vulnetix
Try Vulnetix Request Demo
CVE-2019-15052 PUBLISHED

The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host. If that host returns a 30x redirect, Gradle also sends those credentials to all subsequent hosts that the request redirects to. This is similar to CVE-2018-1000007.

EPSS 0.31% · 54.3th percentile

Risk Scores

EPSS Score
0.31%
54.3th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSgradle2.10-1, 2.7-3, 2.7-2
Ubuntu:Pro:18.04:LTSgradle3.4.1-7ubuntu1, 4.4.1-5ubuntu2~18.04, 4.4.1-5ubuntu2~18.04+esm1
Ubuntu:24.04:LTSgradle0, 4.4.1-18, 4.4.1-20
Ubuntu:22.04:LTSgradle4.4.1-13, 0
Ubuntu:25.10gradle0, 4.4.1-22
Ubuntu:20.04:LTSgradle0, 4.4.1-10, 4.4.1-9

Timeline

References

Open in Interactive Console →