Name of the Vulnerable Software and Affected Versions: Apache NIFI versions prior to 0.4.0-RC2

Description: A security issue was discovered in Apache NIFI where passwords for the InvokeHTTP component were not encrypted.

Recommendations: For versions prior to 0.4.0-RC2, update to version 0.4.0-RC2 or later to resolve the issue.