Lucene search
Veracode Vulnerability DatabaseVERACODE:34025HistoryFeb 07, 2022 - 8:23 a.m.
Privilege Escalation
2022-02-0708:23:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.0004 Low
EPSS
Percentile
5.1%
org.apache.gobblin:gobblin-utility is vulnerable to privilege escalation. Hadoop token is written to a temp file which is accessible via Unix systems allowing remote attackers to bypass restrictions and gain unauthorized access.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache gobblin | le | 0.15.0 | |
| apache gobblin | le | 0.15.0 |
Related
cnvd
cnvd
Apache Gobblin Information Disclosure Vulnerability
2022-02-16 00:00:00
prion
prion
Design/Logic Flaw
2022-02-04 23:15:00
cvelist
cvelist
CVE-2021-36151 Local Credentials Disclosure Vulnerability
2022-02-04 22:32:56
cve
cve
CVE-2021-36151
2022-02-04 23:15:11
osv
osv
Hadoop token in temp file visible to all users in Apache Gobblin
2022-02-06 00:01:07
nvd
nvd
CVE-2021-36151
2022-02-04 23:15:11
github
github
Hadoop token in temp file visible to all users in Apache Gobblin
2022-02-06 00:01:07