Lucene search

GHSA-6XWF-XVF3-V459 Apache Airflow: Incorrect Default Permissions in audit logs for Ops and Viewers users

🗓️ 01 Mar 2024 12:53:30Reported by GoogleType

osv🔗 osv.dev👁 15 Views

Apache Airflow: Vulnerability in Default Audit Log Permission

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 12
Cvelist	CVE-2024-26280 Apache Airflow: Overly broad default permissions for Viewer/Ops (audit logs)	1 Mar 202411:05	–	cvelist
OSV	PYSEC-2024-42	1 Mar 202411:15	–	osv
OSV	CVE-2024-26280	1 Mar 202411:15	–	osv
OSV	BIT-AIRFLOW-2024-26280 Apache Airflow: Overly broad default permissions for Viewer/Ops (audit logs)	31 Mar 202418:16	–	osv
CVE	CVE-2024-26280	1 Mar 202411:15	–	cve
Github Security Blog	Apache Airflow: Incorrect Default Permissions in audit logs for Ops and Viewers users	1 Mar 202412:30	–	github
Vulnrichment	CVE-2024-26280 Apache Airflow: Overly broad default permissions for Viewer/Ops (audit logs)	1 Mar 202411:05	–	vulnrichment
Prion	Design/Logic Flaw	1 Mar 202411:15	–	prion
Veracode	Incorrect Default Permissions	4 Mar 202415:16	–	veracode
RedhatCVE	CVE-2024-26280	23 May 202507:22	–	redhatcve

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-26280
github	www.github.com/apache/airflow/pull/37501
github	www.github.com/apache/airflow/commit/1a96407cd2d76616c1137de288f092d4f3b097fa
github	www.github.com/apache/airflow/commit/7f10998c17ab9d725bc8671deb4c12d672bfba99
github	www.github.com/apache/airflow/commit/8324c87e05741e5a673c43b315619a3788bacc2e
github	www.github.com/apache/airflow/commit/8463ee4f25114a6c5fb2408d6026afe94bdf106d
github	www.github.com/apache/airflow/commit/f2ea8a3e1753012bfe0d529c9c8be66cf55ca28f
github	www.github.com/apache/airflow/commit/f4b9cc74976b7df1acbc3c63471b5751b3e2c40c
github	www.github.com/apache/airflow
github	www.github.com/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2024-42.yaml

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Mar 2024 12:30Current

4.3Medium risk

Vulners AI Score4.3

CVSS34.7

EPSS0.00098

SSVC