2 matches found
Authentication bypass in Apache Airflow
The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security risks to users who miss this fact. From Airflow 1.10.11 the default has been changed to deny all requests by default and is documented at...
9.8CVSS7.7AI score0.99778EPSS
SaveExploits9References12Affected Software1
Default configuration
The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security risks to users who miss this fact. From Airflow 1.10.11 the default has been changed to deny all requests by default and is documented at...
7.5CVSS9.3AI score0.99778EPSS
SaveExploits9References3Affected Software1
20