cvedb.io
CVE-2021-36152
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2022-02-04T23:15:11.647 · Last modified 2026-06-17T03:58:25.283

Summary

Apache Gobblin trusts all certificates used for LDAP connections in Gobblin-as-a-Service. This affects versions <= 0.15.0. Users should update to version 0.16.0 which addresses this issue.

Affected products

apache — gobblin

Does this affect you?

Add your gear to cvedb and we'll alert you only when apache ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.