Apache Gobblin
2 CVEs affecting Apache Gobblin. Latest disclosed: 2022-02-04. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-36152 | Critical | 9.8 | 2022-02-04 | Apache Gobblin trusts all certificates used for LDAP connections in Gobblin-as-a-Service. This affects versions <= 0.15.0. Users should update to version 0.16… |
CVE-2021-36151 | Medium | 5.5 | 2022-02-04 | In Apache Gobblin, the Hadoop token is written to a temp file that is visible to all local users on Unix-like systems. This affects versions <= 0.15.0. Users s… |