Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-36151

Local Credentials Disclosure Vulnerability

Description

In Apache Gobblin, the Hadoop token is written to a temp file that is visible to all local users on Unix-like systems. This affects versions <= 0.15.0. Users should update to version 0.16.0 which addresses this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache Gobblin

  • Apache Gobblin to ≤ 0.15.0affected

References