EUVD-2019-0011

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

LDAP auth backend in Airflow prior to version 1.10.1 had misconfiguration disabling server certificate checks

Reporter	Title	Published	Views	Family All 10
CNVD	Apache Airflow SSL Certificate Validation Vulnerability	25 Jan 201900:00	–	cnvd
CVE	CVE-2018-20245	23 Jan 201917:00	–	cve
Cvelist	CVE-2018-20245	23 Jan 201917:00	–	cvelist
Github Security Blog	Improper Certificate Validation in Apache Airflow	25 Jan 201916:19	–	github
NVD	CVE-2018-20245	23 Jan 201917:29	–	nvd
OSV	GHSA-77RC-X84Q-PV4F Improper Certificate Validation in Apache Airflow	25 Jan 201916:19	–	osv
OSV	PYSEC-2019-143	23 Jan 201917:29	–	osv
Prion	Input validation	23 Jan 201917:29	–	prion
PyPA	PYSEC-2019-143	23 Jan 201917:29	–	pypa
Veracode	Man-in-the-Middle (MitM)	24 Jan 201902:55	–	veracode

[
  {
    "enisaIdVendor": [
      {
        "id": "7a7c7981-bb05-346c-94a0-f81314ab36b7",
        "vendor": {
          "name": "Apache Software Foundation"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "78ab19be-88c2-3472-b359-659743e5f310",
        "product": {
          "name": "Apache Airflow"
        },
        "product_version": "Apache Airflow ≤ 1.10.0"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread.html/b549c7573b342a6e457e5a3225c33054244343927bbfb2a4cdc4cf73@%3Cdev.airflow.apache.org%3E
github	www.github.com/advisories/GHSA-77rc-x84q-pv4f
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-20245
github	www.github.com/apache/airflow/commit/28abf87bd173cc4cedc57f553118470e5745a968
github	www.github.com/apache/airflow/commit/66d0d05ea0802aec407e0ef5435a962080db0926
github	www.github.com/apache/airflow/commit/d8d0e8c59203f793f81d47d5adb1362df0b5d8d1
github	www.github.com/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2019-143.yaml
lists	www.lists.apache.org/thread.html/b549c7573b342a6e457e5a3225c33054244343927bbfb2a4cdc4cf73%40%3Cdev.airflow.apache.org%3E
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

7.5High risk

Vulners AI Score7.5

CVSS 37.5

CVSS 25

EPSS0.01016