PT-2022-10487

CVE-2021-36152

·

Published

2022-02-04

·

Updated

2022-02-09

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Apache Gobblin versions <= 0.15.0
Description The issue is related to Apache Gobblin trusting all certificates used for LDAP connections in Gobblin-as-a-Service. This allows for potential security risks.
Recommendations For Apache Gobblin versions <= 0.15.0, update to version 0.16.0 to address the issue.
Exploitability
Fix
Researchers
Vendors
Affected products
Related identifiers
CVE-2021-36152
GHSA-Q5RX-8C2H-5Q7J
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com