Lucene search
GoogleOSV:CVE-2020-9487HistoryOct 01, 2020 - 8:15 p.m.
CVE-2020-9487
2020-10-0120:15:14
Google
osv.dev
5
In Apache NiFi 1.0.0 to 1.11.4, the NiFi download token (one-time password) mechanism used a fixed cache size and did not authenticate a request to create a download token, only when attempting to use the token to access the content. An unauthenticated user could repeatedly request download tokens, preventing legitimate users from requesting download tokens.
References
Related
osv
osv
Missing Authentication for Critical Function in Apache NiFi
2022-01-06 20:41:04
cvelist
cvelist
CVE-2020-9487
2020-10-01 19:53:11
cve
cve
CVE-2020-9487
2020-10-01 20:15:14
veracode
veracode
Denial Of Service (DoS)
2020-10-02 05:06:25
nvd
nvd
CVE-2020-9487
2020-10-01 20:15:14
prion
prion
Cross site request forgery (csrf)
2020-10-01 20:15:00
github
github
Missing Authentication for Critical Function in Apache NiFi
2022-01-06 20:41:04