Not rated

CVE-2021-36152 Apache Gobblin trusts all certificates used for LDAP connections in Gobblin-as-a-Service

Description

Apache Gobblin trusts all certificates used for LDAP connections in Gobblin-as-a-Service. This affects versions <= 0.15.0. Users should update to version 0.16.0 which addresses this issue.

Affected products and versions

Product	Affected versions	Fixed in
Apache Gobblin 0.15	earliest → 0.15.0	No fix stated

References

lists.apache.org lists.apache.org

Timeline

Published February 4, 2022
Last modified August 4, 2024

The 2 CVEs of Apache Gobblin →

CVE-2021-36151 In Apache Gobblin, the Hadoop token is written to a temp file that is visible to all local users on Unix-like systems Not rated

Track this CVE

CVE-2021-36152 Apache Gobblin trusts all certificates used for LDAP connections in Gobblin-as-a-Service

Description

Affected products and versions

References

Timeline

Other CVEs of Apache Gobblin