VDB
GCVE-110-CLOUD-2022-0030
GCVE-110-CLOUD-2022-0030
Advisory Published
Two API calls used by Amazon Managed Workflows for Apache Airflow (MWAA)
to convert AWS IAM credentials into tokens that can be used to login to Airflow
(CreateCliToken and CreateWebLoginToken) were logging the tokens to Cloudtrail.
The event included the hostname for the airflow server, so everything required
to login to Airflow was in the event. However, the issue was largely mitigated
by the fact that the tokens are only valid for 60 seconds and CloudTrail delivers
logs on average about every 15 minutes, so the chance of receiving a valid token
were low.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| AWS | MWAA | — | — |
| AWS | IAM | — | — |
| AWS | CloudTrail | — | — |
Browse GCVE Records
73,866 records in the GCVE database · Updated July 19, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.