Remote Code Execution Vulnerability in Gradle Enterprise and Build Cache Node

CVE-2021-41589

What is CVE-2021-41589?

In Gradle Enterprise versions prior to 2021.3 and Enterprise Build Cache Node before 10.0, a vulnerability exists that could allow cache poisoning and unauthorized remote code execution. The default configuration permits anonymous access, which exposes critical components of the build cache to potential exploitation. If not properly secured, a malicious actor with network connectivity could manipulate the cache entries, inserting harmful code into the build process. This poses significant risk, particularly if access controls are not tightened. The advisory emphasizes the importance of modifying access settings to prevent unauthorized users from unsafely altering cache data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References