CVE-2020-17511 — Apache Software Foundation / Apache Airflow

CVE-2020-17511

Apache Software Foundation / Apache Airflow PUBLISHED

Description (CNA)

In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the password gets logged in plain text in the Log table in Airflow Metadatase. Same happened when creating a Connection with a password field.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache Airflow	affected Apache Airflow before 1.10.13

CWE

No CWE identifiers supplied.

References

https://lists.apache.org/thread.html/ree782a29d927b96bf0b39fb92e2f1f09ea3112a985f7a08ce93765ac%40%3Cusers.airflow.apache.org%3E

ADP enrichment

CVE

No English description supplied.

https://lists.apache.org/thread.html/ree782a29d927b96bf0b39fb92e2f1f09ea3112a985f7a08ce93765ac%40%3Cusers.airflow.apache.org%3E