Gradle Enterprise Build Cache Node

Vendor Data

Vendor Patch Exists

Community Data

Vulnerable

Vendor Resources

Resource	Link
Gradle Enterprise Security Advisories - Remote code execution vulnerability due to use of Log4j2	https://security.gradle.com/advisory/2021-11

Community Resources

Resource	Link
source	https://security.gradle.com/advisory/2021-11

Community Notes

Source	Note
NCSC-NL	CVE-2021-4104: Not vuln ; CVE-2021-44228: Fix

Sources

Date	Attribution	Description
2021-12-31 9:06:53	NCSC-NL	Updated vendorPatchExists. Updated community note. Updated community link source.
2021-12-30 21:31:50	CISAGov	Updated communityVulnerable. Updated vendorPatchExists. Updated vendor link Gradle Enterprise Security Advisories - Remote code execution vulnerability due to use of Log4j2.