CVE-2018-20245

The LDAP auth backend (airflow.contrib.auth.backends.ldap_auth) prior to Apache Airflow 1.10.1 was misconfigured and contained improper checking of exceptions…

published January 23, 2019

CVSS
—
EPSS
1%
Percentile
63.0
In the wild
Unconfirmed
What it is

The LDAP auth backend (airflow.contrib.auth.backends.ldap_auth) prior to Apache Airflow 1.10.1 was misconfigured and contained improper checking of exceptions which disabled server certificate checking.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01016 · 63.0th percentile
Published
2019-01-23T17:00Z
EPSS history
Timeline
  • 23 JAN 17:00Z
    The LDAP auth backend (airflow.contrib.auth.backends.ldap_auth) prior to Apache Airflow 1.10.1 was misconfigured and contained improper checking of exceptions…
    cvelistv5