CVE-2026-25604

MEDIUM

5.4

Descripcion

In AWS Auth manager, the origin of the SAML authentication has been used as provided by the client and not verified against the actual instance URL. This allowed to gain access to different instances with potentially different access controls by reusing SAML response from other instances. You should upgrade to 9.22.0 version of provider if you use AWS Auth Manager.

Detalles CVE

Puntuacion CVSS v3.15.4

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosLOW

Interaccion usuarioNONE

Publicado3/9/2026

Ultima modificacion3/10/2026

Fuentenvd

Avistamientos honeypot0

Productos afectados

apache:airflow_providers_amazon

Debilidades (CWE)

CWE-346

Referencias

https://github.com/apache/airflow/pull/61368(security@apache.org)

https://lists.apache.org/thread/spwwrsmwxod7fpttcd7n7zs46j839l77(security@apache.org)

http://www.openwall.com/lists/oss-security/2026/03/09/6(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.