CVE-2022-38170
Overly permissive umask for daemons
概要
Overly permissive umask for daemons
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow components when running with the --daemon flag which could result in a race condition giving world-writable files in the Airflow home directory and allowing local users to expose arbitrary file contents via the webserver.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
airflow
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.3.4"}]}]
参照URL
- advisory openwall.com
- advisory openwall.com
- advisory openwall.com
- advisory lists.apache.org
- web nvd.nist.gov