PULSE
EN
FEED
ransomwallstreet reclama a TGM Manufacturing, Inc · US · Manufacturingransomqilin reclama a Segres Systec · ES · Technologyransomqilin reclama a Shield Wall Systems of Florida · US · Government & Defenseransomqilin reclama a The Excalibur Group · US · Otherransomiah6477 reclama a hilmar-cheese · US · Agriculture and Food Productionransomn0n reclama a Company #70 · EG · Not Foundransomn0n reclama a Company #73 · Not Foundransomlockbit5 reclama a torcivialaw.com · IT · Professional Servicesransomlockbit5 reclama a kidzrkooldental.com · US · Healthcareransomlockbit5 reclama a lcww.com.eg · EG · Not Foundransomlockbit5 reclama a neweramachines.com · US · Manufacturingransomlockbit5 reclama a grupoabg.com · MX · Manufacturingransomqilin reclama a KD Corp · KR · Not Foundransomakira reclama a Videk · GB · Technologyransomwallstreet reclama a TGM Manufacturing, Inc · US · Manufacturingransomqilin reclama a Segres Systec · ES · Technologyransomqilin reclama a Shield Wall Systems of Florida · US · Government & Defenseransomqilin reclama a The Excalibur Group · US · Otherransomiah6477 reclama a hilmar-cheese · US · Agriculture and Food Productionransomn0n reclama a Company #70 · EG · Not Foundransomn0n reclama a Company #73 · Not Foundransomlockbit5 reclama a torcivialaw.com · IT · Professional Servicesransomlockbit5 reclama a kidzrkooldental.com · US · Healthcareransomlockbit5 reclama a lcww.com.eg · EG · Not Foundransomlockbit5 reclama a neweramachines.com · US · Manufacturingransomlockbit5 reclama a grupoabg.com · MX · Manufacturingransomqilin reclama a KD Corp · KR · Not Foundransomakira reclama a Videk · GB · Technology
← Todos los CVEs
CVE Watch—

CVE-2020-13927

Apache Airflow's Experimental API Authentication Bypass

CVSS

—

Sin CVSS

EPSS

99.8%

p100

KEV

SÍ

18 ene 2022

Exploit Today

80

0-100

Publicado: — · Última mod.: —

EPSS · 30d
99.8%EPSS · 30 días99.8%
2026-09-172026-10-14
Ficha del catálogo KEV

Producto

Apache / Airflow's Experimental API

Vulnerabilidad

Apache Airflow's Experimental API Authentication Bypass

Añadido a KEV

18 ene 2022

Remediar antes de

18 jul 2022

Uso conocido en ransomware

No

Descripción resumida

The previous default setting for Airflow's Experimental API was to allow all API requests without authentication.

Acción requerida

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2020-13927

CVEs relacionados

Sin CVEs relacionados por CWE o producto.