PT-2017-16636
CVE-2017-5636
·
تاريخ النشر
2017-10-19
·
تاريخ التحديث
2022-05-17
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Apache NiFi versions prior to 0.7.2
Apache NiFi versions 1.x prior to 1.1.2
Description
The issue allows a carefully crafted
username to impersonate another user and gain their permissions on a replicated request to another node in a cluster environment. This is due to a vulnerability in the proxy chain serialization/deserialization.Recommendations
For Apache NiFi versions prior to 0.7.2, update to version 0.7.2 or later.
For Apache NiFi versions 1.x prior to 1.1.2, update to version 1.1.2 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾