Lucene search
GoogleOSV:GHSA-G644-PR5V-VPPFHistoryJan 06, 2022 - 8:41 p.m.
Insertion of Sensitive Information into Log File in Apache NiFi Stateless
2022-01-0620:41:02
Google
osv.dev
7
0.001 Low
EPSS
Percentile
46.9%
In Apache NiFi 1.10.0 to 1.11.4, the NiFi stateless execution engine produced log output which included sensitive property values. When a flow was triggered, the flow definition configuration JSON was printed, potentially containing sensitive values in plaintext.
Related
cvelist
cvelist
CVE-2020-9486
2020-10-01 19:50:53
veracode
veracode
Information Disclosure
2020-10-02 01:39:55
prion
prion
Default configuration
2020-10-01 20:15:00
cve
cve
CVE-2020-9486
2020-10-01 20:15:14
github
github
Insertion of Sensitive Information into Log File in Apache NiFi Stateless
2022-01-06 20:41:02
nvd
nvd
CVE-2020-9486
2020-10-01 20:15:14
osv
osv
CVE-2020-9486
2020-10-01 20:15:14