Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-7MX5-X372-XH87
HistoryApr 20, 2021 - 4:40 p.m.

Incorrect Session Validation in Apache Airflow

2021-04-2016:40:27
CWE-269
GitHub Advisory Database
github.com
43

0.064 Low

EPSS

Percentile

93.7%

JSON

Incorrect Session Validation in Apache Airflow Webserver versions prior to 1.10.14 with default config allows a malicious airflow user on site A where they log in normally, to access unauthorized Airflow Webserver on Site B through the session from Site A. This does not affect users who have changed the default value for [webserver] secret_key config.

CPENameOperatorVersion
apache-airflowlt1.10.14

Related

osv 4
cve 1
prion 1
veracode 1
nuclei 1
cvelist 1
fortinet 1
osv
osv
CVE-2020-17526
2020-12-21 17:15:12
Incorrect Session Validation in Apache Airflow
2021-04-20 16:40:27
PYSEC-2020-22
2020-12-21 17:15:00
cve
cve
CVE-2020-17526
2020-12-21 17:15:00
prion
prion
Design/Logic Flaw
2020-12-21 17:15:00
veracode
veracode
Insecure Default Secret Key
2020-12-22 04:35:19
nuclei
nuclei
Apache Airflow <1.10.14 - Authentication Bypass
2022-08-25 10:16:13
cvelist
cvelist
CVE-2020-17526
2020-12-21 16:45:13
fortinet
fortinet
Multiple vulnerabilities in Apache Airflow
2022-06-07 00:00:00

0.064 Low

EPSS

Percentile

93.7%

JSON
Related for GHSA-7MX5-X372-XH87
osv4cve1prion1veracode1nuclei1cvelist1fortinet1