Improper Authentication in gradle - #VU166062

Vulnerability details

The vulnerability allows a local user to steal build credentials, execute code with the victim's privileges, or cause a denial of service.

The vulnerability exists due to missing daemon authentication and stale registry validation in the Gradle client when connecting to a terminated daemon's loopback port. A local user can bind that port before the victim starts a build or IDE synchronization, receive sensitive build data, and return crafted replies that load attacker-chosen code through the Tooling API or trigger command-line deserialization leading to code execution, depending on available classes, or denial of service.

Affected software

Remediation

External References

• https://github.com/gradle/gradle/security/advisories/GHSA-pcp8-98xm-c6pr

Related Security Bulletins

• Multiple vulnerabilities in gradle