GoogleOSV:GHSA-Q8H9-PQCX-59HWApache Airflow exposes arbitrary file content
4.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0004 Low
EPSS
Percentile
5.1%
In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow components when running with the --daemon flag which could result in a race condition giving world-writable files in the Airflow home directory and allowing local users to expose arbitrary file contents via the webserver.
References
www.openwall.com/lists/oss-security/2022/09/02/12
www.openwall.com/lists/oss-security/2022/09/02/3
www.openwall.com/lists/oss-security/2022/09/21/2
github.com/apache/airflow
github.com/apache/airflow/commit/b6a2cd1aa34f69a36ea127e4f7f5ba87f4aca420
github.com/apache/airflow/commit/bf01d10cd348e679916034de1befb79ec6e46ff8
github.com/apache/airflow/commit/c14ea8f0f34944d2ecfa9021d167602e8b2b8b90
github.com/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2022-261.yaml
lists.apache.org/thread/zn8mbbb1j2od5nc9zhrvb7rpsrg1vvzv
nvd.nist.gov/vuln/detail/CVE-2022-38170
Related
4.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0004 Low
EPSS
Percentile
5.1%