CVE-2020-15774

MEDIUM

Gradle Enterprise 2018.5-2020.2.4 - Insufficient Session Expiration

Title source: llm
STIX 2.1

Description

An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4. An attacker with physical access to the browser of a user who has recently logged in to Gradle Enterprise and since closed their browser could reopen their browser to access Gradle Enterprise as that user.

References (2)

Core 2
Core References
Third Party Advisory x_refsource_misc
https://github.com/gradle/gradle/security/advisories
Vendor Advisory x_refsource_confirm
https://security.gradle.com/advisory/CVE-2020-15774

Scores

CVSS v3 6.8
EPSS 0.0034
EPSS Percentile 26.0%
Attack Vector PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-613
Status published
Products (1)
gradle/enterprise 2018.5 - 2020.2.4
Published Sep 18, 2020
Tracked Since Feb 18, 2026