| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.gobblin:gobblin-core | < 0.16.0 | 0.16.0 |
| gobblin | ≤ 0.15.0 |
In Apache Gobblin, the Hadoop token is written to a temp file that is visible to all local users on Unix-like systems. This affects versions <= 0.15.0. Users should update to version 0.16.0 which addresses this issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free