CVE-2021-36151
Assigner: apache
Published: 2022-02-04T22:32:56
State: PUBLISHED
affected: product: Apache Gobblin
vendor: Apache Software Foundation
versions: lessThanOrEqual: 0.15.0
status: affected
version: Apache Gobblin
versionType: custom
credits: value: Apache Gobblin would like to thank Jonathan Leitschuh for reporting this issue. 
descriptions: value: In Apache Gobblin, the Hadoop token is written to a temp file that is visible to all local users on Unix-like systems. This affects versions <= 0.15.0. Users should update to version 0.16.0 which addresses this issue.
problemTypes: descriptions: description: Hadoop token visible to all local users
type: text
source: discovery: UNKNOWN
title: Local Credentials Disclosure Vulnerability
x_generator: engine: Vulnogram 0.0.9