Apache Gobblin Information Disclosure Vulnerability

Apache Gobblin is a distributed data integration framework from the U.S. Apache (Apache) Foundation. It is used to simplify common aspects of big data integration. A security vulnerability exists in Apache Gobblin, which stems from a Hadoop token being written to a temporary file that is visible to all local users on Unix-like systems. An attacker could gain access to sensitive information through this vulnerability.