[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5XwS4tAlaCyYfFpnUUwks1qYZ8OYhxgkR8LKArh3LbE":3,"g5a-risk:CVE-2020-17526":124},{"success":4,"data":5,"meta":122},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":26,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":65,"weaknesses":66,"weaknessesCount":49,"isActivelyExploited":70,"cisaInfo":26,"otxData":26,"relatedBlogPosts":71,"seoMetadata":72,"configurations":97,"relatedVendorCves":106,"notableEvents":107},"CVE-2020-17526","What is CVE-2020-17526?","Incorrect Session Validation in Apache Airflow Webserver versions prior to 1.10.14 with default config allows a malicious airflow user on site A where they log in normally, to access unauthorized Airflow Webserver on Site B through the session from Site A. This does not affect users who have changed the default value for `[webserver] secret_key` config.","Incorrect Session Validation in Apache Airflow Webserver versions prior to 1.10.14 with default config allows a malicious airflow user on site A where they l...","2020-12-21T17:15:12.507","2023-11-07T03:19:13.39",7.7,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","CHANGED","HIGH",null,3.1,4,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":22,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":34,"Authentication":35,"ConfidentialityImpact":36,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":37,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:M\u002FAu:S\u002FC:P\u002FI:N\u002FA:N","MEDIUM","SINGLE","PARTIAL",3.5,6.8,2.9,0.23864,[40,40,40,40,40,40,40],"High",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"apache","airflow","*","cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*",1,[51,57,61],{"url":52,"source":53,"tags":54},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2020\u002F12\u002F21\u002F1","Openwall",[55,56],"Mailing List","Third Party Advisory",{"url":58,"source":59,"tags":60},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr466759f377651f0a690475d5a52564d0e786e82c08d5a5730a4f8352%40%3Cannounce.apache.org%3E","Apache",[],{"url":62,"source":59,"tags":63},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frbeeb73a6c741f2f9200d83b9c2220610da314810c4e8c9cf881d47ef%40%3Cusers.airflow.apache.org%3E",[55,64],"Vendor Advisory",3,[67],{"id":68,"name":68,"description":69},"Unknown","NVD-CWE-noinfo",false,[],{"title":73,"metaDescription":74,"keywords":75,"canonicalUrl":76,"structuredData":77},"What is CVE-2020-17526? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2020-17526, a high severity cyber security vulnerability from 2020. Incorrect Session Validation in Apache Airflow Webserver ve...","CVE-2020-17526, CVE-2020-17526 vulnerability, CVE-2020-17526 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, apache security, airflow vulnerability","\u002Fwhat-is\u002Fcve-2020-17526",{"@context":78,"@type":79,"headline":73,"description":74,"datePublished":10,"dateModified":11,"author":80,"publisher":84,"about":88,"mainEntityOfPage":92,"articleSection":95,"keywords":96},"https:\u002F\u002Fschema.org","TechArticle",{"@type":81,"name":82,"url":83},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":81,"name":82,"url":83,"logo":85},{"@type":86,"url":87},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":89,"name":6,"description":90,"additionalType":91},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":93,"@id":94},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2020-17526","Cybersecurity","CVE-2020-17526, CVE-2020-17526 vulnerability, CVE-2020-17526 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[98],{"Operator":26,"Negate":26,"Nodes":99},[100],{"Operator":101,"Negate":26,"CPEMatch":102},"OR",[103],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":104,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":105,"VersionEndIncluding":26},"114B997C-5881-4AE3-87C0-5EECAA2207E5","1.10.14",[],[108,115],{"id":109,"eventType":110,"eventTime":111,"details":112,"label":113,"color":114},"b103b36e-413e-4d17-8934-b150b8176c6d","LOW_EPSS_DELTA","2025-11-19T04:06:21.052284+00:00","Daily EPSS score decreased by 0.290 on 2023-12-30","EPSS Score Decreased","green",{"id":116,"eventType":117,"eventTime":118,"details":119,"label":120,"color":121},"455fb07e-5de0-4bf7-8173-1c4221d326f0","HIGH_EPSS_DELTA","2025-11-22T04:06:08.36238+00:00","Daily EPSS score increased by 0.290 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":123,"version":32},1793219348894,{"score":125,"band":126,"action":127,"scoredAt":128},49,"Medium","Plan remediation","2026-10-28T06:49:56.53914+00:00"]