CVE-2022-31145: Insufficient Session Expiration

FlyteAdmin is the control plane for Flyte responsible for managing entities and administering workflow executions. In versions 1.1.30 and prior, authenticated users using an external identity provider can continue to use Access Tokens and ID Tokens even after they expire. Users who use FlyteAdmin...

PT-2022-20561

Name of the Vulnerable Software and Affected Versions FlyteAdmin versions 1.1.30 and prior Description The issue concerns the improper validation of access tokens, allowing authenticated users who use an external identity provider to continue using Access Tokens and ID Tokens even after they...