CVE-2022-38170

2022-09-0207:15:07

Google

osv.dev

apache airflow

insecure umask

race condition

world-writable files

local users

arbitrary file contents

webserver

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

4.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow components when running with the --daemon flag which could result in a race condition giving world-writable files in the Airflow home directory and allowing local users to expose arbitrary file contents via the webserver.

CPENameOperatorVersion
airfloweqconstraints-2.0.1rc1
airfloweqconstraints-2.0.0rc3
airfloweqconstraints-2.3.0rc1
airfloweqconstraints-2.3.3rc3
airfloweqconstraints-2-3
airfloweqconstraints-2.3.3rc2
airfloweqconstraints-2.3.3rc1
airfloweqconstraints-2.0.0rc2
airfloweqconstraints-2.3.1rc1
airfloweqconstraints-2.3.2rc2

Name	Operator	Version
airflow	eq	constraints-2.0.1rc1
airflow	eq	constraints-2.0.0rc3
airflow	eq	constraints-2.3.0rc1
airflow	eq	constraints-2.3.3rc3
airflow	eq	constraints-2-3
airflow	eq	constraints-2.3.3rc2
airflow	eq	constraints-2.3.3rc1
airflow	eq	constraints-2.0.0rc2
airflow	eq	constraints-2.3.1rc1
airflow	eq	constraints-2.3.2rc2