March 11, 2025
Proactive Defense: The Importance of Incident Response Planning in Cybersecurity
Rewterz Threat Advisory – Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows information disclosure
February 18, 2021Rewterz Threat Advisory – Cisco Webex Meetings cross-site scripting
February 18, 2021Rewterz Threat Advisory – Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows information disclosure
February 18, 2021Rewterz Threat Advisory – Cisco Webex Meetings cross-site scripting
February 18, 2021
Severity
Medium
Analysis Summary
CVE-2021-26559
Apache Airflow could allow a remote authenticated attacker to obtain sensitive information, caused by improper access control on Configurations Endpoint for the Stable API. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain configurations information, and use this information to launch further attacks against the affected system.
Impact
Information disclosure
Affected Vendors
Apache
Affected Products
Apache Airflow 2.0.0
Remediation
Upgrade to the latest version of Airflow (2.0.1 or later)