Lucene search
PRIOn knowledge basePRION:CVE-2019-12421HistoryNov 19, 2019 - 10:15 p.m.
Authentication flaw
2019-11-1922:15:00
PRIOn knowledge base
www.prio-n.com
2
When using an authentication mechanism other than PKI, when the user clicks Log Out in NiFi versions 1.0.0 to 1.9.2, NiFi invalidates the authentication token on the client side but not on the server side. This permits the user’s client-side token to be used for up to 12 hours after logging out to make API requests to NiFi.
Related
cve
cve
CVE-2019-12421
2019-11-19 22:15:11
veracode
veracode
Improper Session Management
2019-11-20 02:46:55
osv
osv
Apache NiFi user log out issue
2019-12-02 18:19:39
CVE-2019-12421
2019-11-19 22:15:11
cvelist
cvelist
CVE-2019-12421
2019-11-19 21:33:12
github
github
Apache NiFi user log out issue
2019-12-02 18:19:39
nvd
nvd
CVE-2019-12421
2019-11-19 22:15:11