PUBLISHED
2026-04-24 13:16
MODIFIED
2026-04-24 13:16
EPSS (Prob. Exploit)
0.57%
Top 53.4%
> DESCRIPTION
The asset dependency graph did not restrict nodes by the viewer's DAG read permissions: a user with read access to at least one DAG could browse the asset graph for any other asset in the deployment and learn the existence and names of DAGs and assets outside their authorized scope.
Users are recommended to upgrade to version 3.2.1, which fixes this issue.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-1220: Insufficient Granularity of Access Control - The product implements access controls via a policy or other feature with the intention to disable or restrict accesses (reads and/or writes) to assets in a system from untrusted agents. However, implemented access controls lack the required granularity
> HISTORIQUE DES MODIFICATIONS
Première apparition
24/04/2026 13:16
Source: NVD
📊
ENRICHISSEMENT
01/11/2026 06:59
CWE
Champ modifié: Description CWE
Ancienne valeur:
CWE-1220: Insufficient Granularity of Access Control - The product implements access controls via a policy or other feature with the intention to disable or restrict accesses (reads and/or writes) to ...
Nouvelle valeur:
CWE-1220: Insufficient Granularity of Access Control - The product implements access controls via a policy or other feature with the intention to disable or restrict accesses (reads and/or writes) to ...
📊
ENRICHISSEMENT
01/05/2026 06:01
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-1220: Insufficient Granularity of Access Control - The product implements access controls via a policy or other feature with the intention to disable or restrict accesses (reads and/or writes) to ...
Total des modifications: 2
Dernière mise à jour: 1 week ago