Total vulnerabilities in the database
In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, if an anonymous user request is replicated to another node, the originating node identity is used rather than the "anonymous" user.
Software | From | Fixed in |
---|---|---|
apache / nifi | 1.1.0 | 1.1.0.x |
apache / nifi | 1.1.1 | 1.1.1.x |
apache / nifi | 0.7.1 | 0.7.1.x |
apache / nifi | 0.7.0 | 0.7.0.x |
![]() |
- | 0.7.2 |
![]() |
1.0.0 | 1.1.2 |