4496 matches found
CVE-2021-38540
The variable import endpoint was not protected by authentication in Airflow =2.0.0, =2.0.0, 2.1.3...
CVE-2021-38540
The variable import endpoint was not protected by authentication in Airflow =2.0.0, =2.0.0, 2.1.3...
PYSEC-2021-326
The variable import endpoint was not protected by authentication in Airflow =2.0.0, =2.0.0, 2.1.3...
CVE-2021-38540
The variable import endpoint was not protected by authentication in Airflow =2.0.0, =2.0.0, 2.1.3...
Information disclosure
The variable import endpoint was not protected by authentication in Airflow =2.0.0, =2.0.0, 2.1.3...
PYSEC-2021-326
The variable import endpoint was not protected by authentication in Airflow =2.0.0, =2.0.0, 2.1.3...
CVE-2021-38540 Apache Airflow: Variable Import endpoint missed authentication check
The variable import endpoint was not protected by authentication in Airflow =2.0.0, =2.0.0, 2.1.3...
CVE-2021-38540
The variable import endpoint was not protected by authentication in Airflow =2.0.0, =2.0.0, 2.1.3...
CVE-2021-38540
Affected software: Apache Airflow 2.x, specifically >=2.0.0 and
CVE-2021-38540: Improper Privilege Management
The variable import endpoint was not protected by authentication in Airflow =2.0.0, =2.0.0, 2.1.3...
Apache Airflow 访问控制错误漏洞
Apache Airflow is an open source platform for creating, managing, and monitoring workflows from the Apache Foundation. The platform is scalable and dynamically monitored. Apache Airflow is vulnerable to an authorization issue that stems from a lack of authorization protection on the product's...
Missing Authorization in Apache Airflow
If remote logging is not used, the worker in the case of CeleryExecutor or the scheduler in the case of LocalExecutor runs a Flask logging server and is listening on a specific port and also binds on 0.0.0.0 by default. This logging server had no authentication and allows reading log files of DAG...
GHSA-M6H2-JX9V-58W6 Missing Authorization in Apache Airflow
If remote logging is not used, the worker in the case of CeleryExecutor or the scheduler in the case of LocalExecutor runs a Flask logging server and is listening on a specific port and also binds on 0.0.0.0 by default. This logging server had no authentication and allows reading log files of DAG...
Information Disclosure
apache-airflow is vulnerable to information disclosure. The logging server running on port 0.0.0.0 by default has no authentication and allows reading log files of DAG jobs...
CVE-2021-35936
If remote logging is not used, the worker in the case of CeleryExecutor or the scheduler in the case of LocalExecutor runs a Flask logging server and is listening on a specific port and also binds on 0.0.0.0 by default. This logging server had no authentication and allows reading log files of DAG...
CVE-2021-35936
If remote logging is not used, the worker in the case of CeleryExecutor or the scheduler in the case of LocalExecutor runs a Flask logging server and is listening on a specific port and also binds on 0.0.0.0 by default. This logging server had no authentication and allows reading log files of DAG...
PYSEC-2021-122
If remote logging is not used, the worker in the case of CeleryExecutor or the scheduler in the case of LocalExecutor runs a Flask logging server and is listening on a specific port and also binds on 0.0.0.0 by default. This logging server had no authentication and allows reading log files of DAG...
Authentication flaw
If remote logging is not used, the worker in the case of CeleryExecutor or the scheduler in the case of LocalExecutor runs a Flask logging server and is listening on a specific port and also binds on 0.0.0.0 by default. This logging server had no authentication and allows reading log files of DAG...
PYSEC-2021-122
If remote logging is not used, the worker in the case of CeleryExecutor or the scheduler in the case of LocalExecutor runs a Flask logging server and is listening on a specific port and also binds on 0.0.0.0 by default. This logging server had no authentication and allows reading log files of DAG...
CVE-2021-35936
If remote logging is not used, the worker in the case of CeleryExecutor or the scheduler in the case of LocalExecutor runs a Flask logging server and is listening on a specific port and also binds on 0.0.0.0 by default. This logging server had no authentication and allows reading log files of DAG...