PT-2023-4774 · Apache · Apache Airflow

·

CVE-2022-46651

·

تاريخ النشر

2023-07-12

·

تاريخ التحديث

2026-02-20

CVSS v4.0

7.1

عالية

المتجهAV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 2.6.3
Description The issue allows an unauthorized actor to gain access to sensitive information in the Connection edit view. This is considered a low-risk vulnerability as it requires access to Connection resources and specific actions to exploit.
Recommendations For versions prior to 2.6.3, upgrade to version 2.6.3 or later to resolve the issue.

استغلال

إصلاح

Information Disclosure

وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾

تصنيف نقاط الضعف

المعرّفات ذات الصلة

BDU:2023-05221
BIT-AIRFLOW-2022-46651
CVE-2022-46651
GHSA-XVW9-3MHM-XJQQ
PYSEC-2023-103

المنتجات المتأثرة

Apache Airflow