CVE-2022-30586: 
Gradle vulnerability analysis and mitigation

Gradle Enterprise through version 2022.2.2 contains a vulnerability related to incorrect access control that could lead to code execution (NVD, Gradle Security). The vulnerability was discovered in the Gradle Enterprise Admin CLI's system password reset functionality for Kubernetes-based installations and was assigned CVE-2022-30586.

The vulnerability exists in the Gradle Enterprise Admin CLI's 'system reset-system-password' command for versions earlier than 1.3.1. The issue stems from the password being parsed by a command shell, which creates an opportunity for command injection. Additionally, the password is used as an argument to a script, making it temporarily visible in the process list (Gradle Security).

The vulnerability allows command execution within the context of an 'enterprise-app' pod instance within the cluster. The password used in the reset process becomes briefly visible via the process list, potentially exposing sensitive credentials (Gradle Security).

The vulnerability has been addressed in Gradle Enterprise Admin CLI version 1.3.1 and later. Users are advised to upgrade to this version or newer to mitigate the risk (Gradle Security).