CVE-2023-49238

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Jan 9, 2024
Updated: Feb 16, 2024
CWE ID 521

Summary

CVE-2023-49238 is a cyber vulnerability affecting Gradle Enterprise before version 2023.1. It allows a remote attacker to potentially gain access to a new installation due to a non-unique initial system user password. Although the password must be changed upon first login, an attacker could potentially log in before the legitimate administrator. The vulnerability has a base severity rating of CRITICAL and an overall base score of 9.8 according to NVD@nist.gov. It poses a high risk to organizations, with potential impacts on confidentiality, integrity, and availability of affected systems. Remediation measures should include updating Gradle Enterprise to version 2023.1 or later and ensuring that the initial system user password is unique and changed immediately after installation.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-49238 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options