CVE-2018-20245 — Apache Software Foundation / Apache Airflow

CVE-2018-20245

Apache Software Foundation / Apache Airflow PUBLISHED

Description (CNA)

The LDAP auth backend (airflow.contrib.auth.backends.ldap_auth) prior to Apache Airflow 1.10.1 was misconfigured and contained improper checking of exceptions which disabled server certificate checking.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache Airflow	affected Apache Airflow <= 1.10.0

CWE

No CWE identifiers supplied.

References

https://lists.apache.org/thread.html/b549c7573b342a6e457e5a3225c33054244343927bbfb2a4cdc4cf73%40%3Cdev.airflow.apache.org%3E

ADP enrichment

CVE

No English description supplied.

https://lists.apache.org/thread.html/b549c7573b342a6e457e5a3225c33054244343927bbfb2a4cdc4cf73%40%3Cdev.airflow.apache.org%3E