✕
Request a Demo
Rewterz
Rewterz Threat Advisory – Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows information disclosure
February 18, 2021
Rewterz
Rewterz Threat Advisory – Cisco Webex Meetings cross-site scripting
February 18, 2021

Rewterz Threat Advisory – Apache Airflow information disclosure

Severity

Medium

Analysis Summary

CVE-2021-26559

Apache Airflow could allow a remote authenticated attacker to obtain sensitive information, caused by improper access control on Configurations Endpoint for the Stable API. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain configurations information, and use this information to launch further attacks against the affected system.

Impact

Information disclosure

Affected Vendors

Apache

Affected Products

Apache Airflow 2.0.0

Remediation

Upgrade to the latest version of Airflow (2.0.1 or later)