What is CVE-2021-41589?

CVE-2021-41589 is a critical-severity vulnerability in Gradle Build_cache_node, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 9.8/10. Published 2021-10-27.

How severe is CVE-2021-41589?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Gradle Build_cache_node

CVE-2021-41589

In Gradle Enterprise before 2021.3 (and Enterprise Build Cache Node before 10.0), there is potential cache poisoning and remote code execution when running the build cache node with its default configuration. This configuration allows anon…

EPSS: 0.023 (81.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

CWE-732 — Incorrect Permission Assignment for Critical Resource

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)
cve@mitre.org (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-41589?: CVE-2021-41589 is a critical-severity vulnerability in Gradle Build_cache_node, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 9.8/10. Published 2021-10-27.
How severe is CVE-2021-41589?: Critical severity. CVSS v3 base score is 9.8 out of 10.