Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.6.0.
Weakness
The product does not properly manage privileges while it is switching between different contexts that have different privileges or spheres of control.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Airflow | Apache | * | 2.6.0 (excluding) |
Potential Mitigations
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/17.html
- https://cwe.mitre.org/data/definitions/30.html
- https://cwe.mitre.org/data/definitions/35.html
References
- http://www.openwall.com/lists/oss-security/2023/05/08/2
- https://github.com/apache/airflow/pull/29506
- https://lists.apache.org/thread/3y83gr0qb8t49ppfk4fb2yk7md8ltq4v
- http://www.openwall.com/lists/oss-security/2023/05/08/2
- https://github.com/apache/airflow/pull/29506
- https://lists.apache.org/thread/3y83gr0qb8t49ppfk4fb2yk7md8ltq4v