description: The LDAP auth backend (airflow.contrib.auth.backends.ldap_auth) prior to Apache Airflow 1.10.1 was misconfigured and contained improper checking of exceptions which disabled server certificate checking.
problem types: Improper Certificate Validation
affected:
{
product: Apache Airflow
vendor: Apache Software Foundation
versions:
status: affected, version: Apache Airflow <= 1.10.0
}