Vulnerability Database
289,697
Total vulnerabilities in the database
CVE-2017-5636
In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, the proxy chain serialization/deserialization is vulnerable to an injection attack where a carefully crafted username could impersonate another user and gain their permissions on a replicated request to another node.
| Software | From | Fixed in |
|---|---|---|
| apache / nifi | 1.1.0 | 1.1.0.x |
| apache / nifi | 1.1.1 | 1.1.1.x |
| apache / nifi | 0.7.1 | 0.7.1.x |
| apache / nifi | 0.7.0 | 0.7.0.x |
org.apache.nifi / nifi
|
- | 0.7.2 |
|
org.apache.nifi / nifi
|
1.0.0 | 1.1.2 |