CVE-2018-20245

2019-01-2317:00:00

apache

www.cve.org

EPSS

0.001

Percentile

41.9%

JSON

The LDAP auth backend (airflow.contrib.auth.backends.ldap_auth) prior to Apache Airflow 1.10.1 was misconfigured and contained improper checking of exceptions which disabled server certificate checking.

CNA Affected

[
  {
    "product": "Apache Airflow",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "Apache Airflow <= 1.10.0"
      }
    ]
  }
]