Описание
Hadoop token in temp file visible to all users in Apache Gobblin
In Apache Gobblin, the Hadoop token is written to a temp file that is visible to all local users on Unix-like systems. This affects versions <= 0.15.0. Users should update to version 0.16.0 which addresses this issue.
Пакеты
Наименование
org.apache.gobblin:gobblin-core
maven
Затронутые версииВерсия исправления
< 0.16.0
0.16.0
Связанные уязвимости
CVSS3: 5.5
nvd
около 4 лет назад
In Apache Gobblin, the Hadoop token is written to a temp file that is visible to all local users on Unix-like systems. This affects versions <= 0.15.0. Users should update to version 0.16.0 which addresses this issue.