Vulnérabilités connues pour n/a Apache NiFi

Votre version est-elle touchée ?

CVE	Résumé	Score	Publiée
CVE-2020-9491	In Apache NiFi 1.2.0 to 1.11.4, the NiFi UI and API were protected by mandating TLS v1.2, as well as listening…	Non notée	1 oct. 2020
CVE-2020-13940	In Apache NiFi 1.0.0 to 1.11.4, the notification service manager and various policy authorizer and user group provider…	Non notée	1 oct. 2020
CVE-2020-9487	In Apache NiFi 1.0.0 to 1.11.4, the NiFi download token (one-time password) mechanism used a fixed cache size and did…	Non notée	1 oct. 2020
CVE-2020-9486	In Apache NiFi 1.10.0 to 1.11.4, the NiFi stateless execution engine produced log output which included sensitive…	Non notée	1 oct. 2020
CVE-2020-1942	In Apache NiFi 0.0.1 to 1.11.0, the flow fingerprint factory generated flow fingerprints which included sensitive…	Non notée	11 févr. 2020
CVE-2019-10083	When updating a Process Group via the API in NiFi versions 1.3.0 to 1.9.2, the response to the request includes all of…	Non notée	19 nov. 2019
CVE-2019-12421	When using an authentication mechanism other than PKI, when the user clicks Log Out in NiFi versions 1.0.0 to 1.9.2,…	Non notée	19 nov. 2019
CVE-2019-10080	The XMLFileLookupService in NiFi versions 1.3.0 to 1.9.2 allowed trusted users to inadvertently configure a…	Non notée	19 nov. 2019