{"schema_version": "1.6.1", "id": "CVE-2020-17511", "summary": "Admin password gets logged in plain text in Apache Airflow", "details": "In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the password gets logged in plain text in the Log table in Airflow Metadatase. Same happened when creating a Connection with a password field.\n", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "Apache Airflow"}, {"fixed": "1.10.13"}]}]}], "references": [{"type": "ADVISORY", "url": "https://lists.apache.org/thread.html/ree782a29d927b96bf0b39fb92e2f1f09ea3112a985f7a08ce93765ac%40%3Cusers.airflow.apache.org%3E"}]}