One-Click AWS Vulnerability Let Attackers Takeover User’s Web Management Panel

Tenable Research has identified a critical vulnerability within the AWS Managed Workflows for Apache Airflow (MWAA) service, which they have named “FlowFixation.” This vulnerability could have permitted attackers to execute a one-click takeover of a user’s web management panel for their Airflow instance. The discovery underscores the ongoing issue of misconfigured shared-parent domains, a problem […]

The post One-Click AWS Vulnerability Let Attackers Takeover User’s Web Management Panel appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security …

airflow amazon aws apache attackers aws click computer security critical critical vulnerability discovery instance issue managed management panel research service takeover tenable vulnerability web web management workflows