Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/05/19 7:17 p.m.49 views

CVE-2026-42526 Apache Airflow Amazon provider: Prevent unauthorized access to team-scoped secrets in AWS Secrets Manager and SSM Parameter Store backends

In the AWS Secrets Manager and SSM Parameter Store secrets backends of apache-airflow-providers-amazon prior to 9.28.0, the team-scoping logic could resolve a connid containing a / e.g. "myteam/conn" to the same path as another team's team-scoped secret when the caller had no team context. A...

0.00413EPSS
SaveExploits0References2
Rows per page
Query Builder