VulnerabilityModified
CVE-2021-41590
The installation configuration user interface available to administrators allows testing the configured SMTP server settings.
MEDIUM 5.3EPSS 0.80%
Does this matter?
Lower severity and a low EPSS score (0.80%). Track it; it rarely justifies an emergency change on its own.
Description
In Gradle Enterprise through 2021.3, probing of the server-side network environment can occur via an SMTP configuration test. The installation configuration user interface available to administrators allows testing the configured SMTP server settings. This test function can be used to identify the listening TCP ports available to the server, revealing information about the internal network environment.
- CVSS 3.1
- 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 0.80% probability · 55th percentile
- CISA KEV
- Not listed
- Affected
- gradle/enterprise
- Source
- cve@mitre.org
References
- https://security.gradle.comVendor Advisory
- https://security.gradle.com/advisory/2021-07Vendor Advisory
- https://security.gradle.comVendor Advisory
- https://security.gradle.com/advisory/2021-07Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.