CVE-2020-1928

Name of the Vulnerable Software and Affected Versions Apache NiFi version 1.10.0

Description An information disclosure issue was found in the sensitive parameter parser, which would log parsed values for debugging purposes. This exposes literal values entered in a sensitive property when no parameter is present.

Recommendations For Apache NiFi version 1.10.0, consider disabling the sensitive parameter parser's debugging logging to prevent exposure of sensitive information. Restrict access to the logs to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.