Vulnerability identifier: #VU85793

Vulnerability risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-51702

CWE-ID: CWE-532

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Apache Airflow
Web applications / Modules and components for CMS
Apache Airflow CNCF Kubernetes provider
Universal components / Libraries / Programming Languages & Components

Vendor: Apache Foundation

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to Airflow worker serializes Kubernetes configuration file for authentication as a dictionary and sends it to the triggerer by storing it in metadata without any encryption. A local user can read the log files and gain access to sensitive data.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

Apache Airflow: 2.3.0 - 2.6.0

Apache Airflow CNCF Kubernetes provider: 5.2.0 - 6.1.0

---

External links
http://github.com/apache/airflow/pull/29498
http://github.com/apache/airflow/pull/30110
http://github.com/apache/airflow/pull/36492
http://lists.apache.org/thread/89x3q6lz5pykrkr1fkr04k4rfn9pvnv9
http://www.openwall.com/lists/oss-security/2024/01/24/3

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.