CVE-2017-5636
First published: Thu Oct 19 2017(Updated: )
In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, the proxy chain serialization/deserialization is vulnerable to an injection attack where a carefully crafted username could impersonate another user and gain their permissions on a replicated request to another node.
Credit: security@apache.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apache NiFi | =0.7.0 | |
| Apache NiFi | =0.7.1 | |
| Apache NiFi | =1.1.0 | |
| Apache NiFi | =1.1.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- vendor/apache
- canonical/apache nifi
- version/apache nifi/0.7.0
- version/apache nifi/0.7.1
- version/apache nifi/1.1.0
- version/apache nifi/1.1.1