CVE-2024-45033

Summary

CVE-2024-45033 is a vulnerability affecting Apache Airflow Fab Provider before version 1.5.2. This issue results from insufficient session expiration, allowing logged-in users to continue accessing the system even after password changes made via the admin CLI. Notably, this issue does not occur when passwords are changed through the webserver. To mitigate this vulnerability, it is recommended that users upgrade to version 1.5.2, which includes the necessary fix. This vulnerability differs from CVE-2023-40273, which was addressed in Apache-Airflow 2.7.0, and should not be confused with it.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.