CVE-2021-41590

In Gradle Enterprise through 2021.3, probing of the server-side network environment can occur via an SMTP configuration test

published October 27, 2021

CVSS
—
EPSS
1%
Percentile
56.2
In the wild
Unconfirmed
What it is

In Gradle Enterprise through 2021.3, probing of the server-side network environment can occur via an SMTP configuration test. The installation configuration user interface available to administrators allows testing the configured SMTP server settings. This test function can be used to identify the listening TCP ports available to the server, revealing information about the internal network environment.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00801 · 56.2th percentile
Published
2021-10-27T13:20Z
EPSS history
Timeline
  • 27 OCT 13:20Z
    In Gradle Enterprise through 2021.3, probing of the server-side network environment can occur via an SMTP configuration test
    cvelistv5