GHSA-jgj9-6v78-6g8m

ghsaUSosv

Improper Authentication In Apache NiFi

view advisory published 2022-05-13Licence: CC-BY-4.0

In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, if an anonymous user request is replicated to another node, the originating node identity is used rather than the "anonymous" user.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2017-5635US	high7.5	3.29% (88th)	—	2017-10-19
In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, if an anonymous user request is replicated to another node, the originating node identity is used rather…

references

External citations — patches, advisories, analysis.

http://www.securityfocus.com/bid/96730WEB
https://nifi.apache.org/security.html#CVE-2017-5635WEB
https://nvd.nist.gov/vuln/detail/CVE-2017-5635ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan