Improper authorization control for web services In org.apache.nifi:nifi
Description
Improper Authentication In Apache NiFi In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, if an anonymous user request is replicated to another node, the originating node identity is used rather than the "anonymous" user.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 maven | 0.7.2, 1.1.2 |
Aliases
1. 2. 3. 4.
References
1. 2.