CVE-2017-7667: High severity apache nifi vulnerability
Published Jun 12, 2017
·Updated
Apache NiFi before 0.7.4 and 1.x before 1.3.0 need to establish the response header telling browsers to only allow framing with the same origin.
Affected Software
7 affected components
Apache nifi<=0.7.3
Apache nifi=1.0.0
Apache nifi=1.0.1
Apache nifi=1.1.0
Apache nifi=1.1.1
Apache nifi=1.1.2
Apache nifi=1.2.0
Event History
Jun 12, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-7667?
CVE-2017-7667 has a medium severity rating due to the risk of clickjacking attacks.
2
How do I fix CVE-2017-7667?
To fix CVE-2017-7667, update Apache NiFi to version 0.7.4 or 1.3.0 or later.
3
Which versions of Apache NiFi are affected by CVE-2017-7667?
CVE-2017-7667 affects Apache NiFi versions prior to 0.7.4 and all 1.x versions before 1.3.0.
4
What kind of attack does CVE-2017-7667 expose users to?
CVE-2017-7667 exposes users to potential clickjacking attacks due to improper frame handling.
5
Is there a known workaround for CVE-2017-7667?
There is no specific known workaround for CVE-2017-7667 besides upgrading to a patched version.