Rewterz Threat Advisory – Multiple Apache Airflow Vulnerabilities 

Severity

High

Analysis Summary

CVE-2022-40127 CVSS:8.8
Apache Airflow could allow a remote authenticated attacker to execute arbitrary commands on the system, caused by an unspecified flaw. By sending a specially-crafted request using the run_id parameter, an attacker could exploit this vulnerability to execute arbitrary commands on the system.

CVE-2022-27949 CVSS:7.5
Apache Airflow could allow a remote attacker to obtain sensitive information, caused by a flaw in the user interface. By sending a specially-crafted request, an attacker could exploit this vulnerability to view unmasked secrets in rendered template values for tasks, and use this information to launch further attacks against the affected system.

CVE-2022-45402 CVSS:6.5
Apache Airflow could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability in the /login` endpoint. An attacker could exploit this vulnerability using a specially-crafted URL to redirect a victim to arbitrary Web sites.

Impact

• Command Execution
• Information Disclosure

Indicators Of Compromise

CVE

• CVE-2022-40127
• CVE-2022-27949
• CVE-2022-45402

Affected Vendors

Apache

Affected Products

• Apache Airflow 2.3.0
• Apache Airflow 2.4.2

Remediation

Upgrade to the latest version of Apache Airflow, available from the Apache Airflow GIT Repository. 
CVE-2022-40127
CVE-2022-27949
CVE-2022-45402