Lucene search
K

5 matches found

Veracode
Veracode
added 2024/04/22 6:15 a.m.12 views

Improper Certificate Validation

apache airflow is vulnerable to Improper Certificate Validation. The vulnerability is due to incomplete certificate validation in FTPTLS connections within the FTP hook, which can potentially be exploited. Implementing proper certificate validation by passing context=ssl.createdefaultcontext duri...

2.7CVSS6.4AI score0.00107EPSS
Exploits0References6Affected Software1
NVD
NVD
added 2024/04/21 6:15 p.m.14 views

CVE-2024-29733

Improper Certificate Validation vulnerability in Apache Airflow FTP Provider. The FTP hook lacks complete certificate validation in FTPTLS connections, which can potentially be leveraged. Implementing proper certificate validation by passing context=ssl.createdefaultcontext during FTPTLS...

2.7CVSS6.5AI score0.00107EPSS
Exploits0References5
OSV
OSV
added 2024/04/21 6:15 p.m.24 views

CVE-2024-29733

Improper Certificate Validation vulnerability in Apache Airflow FTP Provider. The FTP hook lacks complete certificate validation in FTPTLS connections, which can potentially be leveraged. Implementing proper certificate validation by passing context=ssl.createdefaultcontext during FTPTLS...

2.7CVSS3.4AI score
Exploits0References5
Cvelist
Cvelist
added 2024/04/21 5:21 p.m.12 views

CVE-2024-29733 Apache Airflow FTP Provider: FTP_TLS instance with unverified SSL context

Improper Certificate Validation vulnerability in Apache Airflow FTP Provider. The FTP hook lacks complete certificate validation in FTPTLS connections, which can potentially be leveraged. Implementing proper certificate validation by passing context=ssl.createdefaultcontext during FTPTLS...

6.7AI score0.00107EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2024/04/21 5:21 p.m.11 views

CVE-2024-29733 Apache Airflow FTP Provider: FTP_TLS instance with unverified SSL context

Improper Certificate Validation vulnerability in Apache Airflow FTP Provider. The FTP hook lacks complete certificate validation in FTPTLS connections, which can potentially be leveraged. Implementing proper certificate validation by passing context=ssl.createdefaultcontext during FTPTLS...

6.8AI score0.00107EPSS
Exploits0References5
Rows per page
Query Builder