CVE-2021-36152

CVE-2021-36152 affects Apache Gobblin (Gobblin-as-a-Service) by using an insecure TrustManager that trusts all certificates for LDAP connections. Versions ≤ 0.15.0 are impacted; upgrading to 0.16.0 addresses the issue. No exploitation details are provided in the documents.

CVE-2021-36152 Insecure TrustManager used in LDAP connections

Apache Gobblin trusts all certificates used for LDAP connections in Gobblin-as-a-Service. This affects versions = 0.15.0. Users should update to version 0.16.0 which addresses this issue...

CVE-2021-36151 Local Credentials Disclosure Vulnerability

In Apache Gobblin, the Hadoop token is written to a temp file that is visible to all local users on Unix-like systems. This affects versions = 0.15.0. Users should update to version 0.16.0 which addresses this issue...

CVE-2021-36151

Summary: CVE-2021-36151 affects Apache Gobblin. The Hadoop token is written to a temporary file that is visible to all local users on Unix-like systems, enabling local information disclosure. Affected versions are 0.15.0 and earlier; the issue is addressed in 0.16.0. Root cause (as described in s...

Apache Gobblin 信任管理问题漏洞

Apache Gobblin is a distributed data integration framework from the Apache Foundation USA. Used to simplify common aspects of big data integration, Apache Gobblin is vulnerable to a trust management issue that stems from Apache Gobblin trusting all certificates used for LDAP connections in...

Apache Gobblin 信息泄露漏洞

Apache Gobblin is a distributed data integration framework from the U.S. Apache Apache Foundation. It is used to simplify common aspects of big data integration. A security vulnerability exists in Apache Gobblin, which stems from a Hadoop token being written to a temporary file that is visible to...