CVE-2026-25604

MEDIUM

5.4

Descricao

In AWS Auth manager, the origin of the SAML authentication has been used as provided by the client and not verified against the actual instance URL. This allowed to gain access to different instances with potentially different access controls by reusing SAML response from other instances. You should upgrade to 9.22.0 version of provider if you use AWS Auth Manager.

Detalhes CVE

Pontuacao CVSS v3.15.4

SeveridadeMEDIUM

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosLOW

Interacao do usuarioNONE

Publicado3/9/2026

Ultima modificacao3/10/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

apache:airflow_providers_amazon

Fraquezas (CWE)

CWE-346

Referencias

https://github.com/apache/airflow/pull/61368(security@apache.org)

https://lists.apache.org/thread/spwwrsmwxod7fpttcd7n7zs46j839l77(security@apache.org)

http://www.openwall.com/lists/oss-security/2026/03/09/6(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.