Apache NiFi 安全漏洞

Apache NiFi is a data processing and distribution system from the Apache USA Foundation. The system is primarily used for data routing, transformation, and system brokering logic. A security vulnerability exists in Apache NiFi versions 1.10.0 to 2.0.0, which stems from a lack of fine-grained...

PT-2024-10215 · Apache · Apache Nifi

Name of the Vulnerable Software and Affected Versions: Apache NiFi versions 1.10.0 through 2.0.0 Description: The issue is related to missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers when creating new Process...

GHSA-76H9-2VWH-W278 vulnerabilities

Vulnerabilities for packages: apache-nifi, jenkins...

GHSA-76H9-2VWH-W278 vulnerabilities

Vulnerabilities for packages: hadoop-fips, jenkins, apache-nifi...

CVE-2024-52046 vulnerabilities

Vulnerabilities for packages: apache-nifi, jenkins...

CVE-2024-52046 vulnerabilities

Vulnerabilities for packages: hadoop-fips, jenkins, apache-nifi...

GHSA-PR98-23F8-JWXV vulnerabilities

Vulnerabilities for packages: kserve-modelmesh, management-api-for-apache-cassandra-5.0, sonarqube, thingsboard, akhq, dependency-track, sonar-scanner-cli, trino, sonarqube-10, tez, apache-nifi, cassandra-reaper, cassandra...

GHSA-6V67-2WR5-GVF4 vulnerabilities

Vulnerabilities for packages: zookeeper-fips, cassandra, management-api-for-apache-cassandra-4.0, cassandra-reaper, akhq, sonarqube-10, kserve-modelmesh, apache-nifi, sonarqube, thingsboard, ontop-fips, ontop, cassandra-fips, management-api-for-apache-cassandra-5.0, sonar-scanner-cli, trino,...

GHSA-PR98-23F8-JWXV vulnerabilities

Vulnerabilities for packages: zookeeper-fips, cassandra, management-api-for-apache-cassandra-4.0, cassandra-reaper, akhq, sonarqube-10, kserve-modelmesh, apache-nifi, sonarqube, thingsboard, ontop-fips, ontop, cassandra-fips, management-api-for-apache-cassandra-5.0, sonar-scanner-cli, trino,...

CVE-2024-12801 vulnerabilities

Vulnerabilities for packages: kserve-modelmesh, management-api-for-apache-cassandra-5.0, sonarqube, thingsboard, akhq, dependency-track, sonar-scanner-cli, trino, sonarqube-10, tez, apache-nifi, cassandra-reaper, cassandra...

CVE-2024-12801 vulnerabilities

Vulnerabilities for packages: zookeeper-fips, cassandra, management-api-for-apache-cassandra-4.0, cassandra-reaper, akhq, sonarqube-10, kserve-modelmesh, apache-nifi, sonarqube, thingsboard, ontop-fips, ontop, cassandra-fips, management-api-for-apache-cassandra-5.0, sonar-scanner-cli, trino,...

CVE-2024-12798 vulnerabilities

Vulnerabilities for packages: kserve-modelmesh, management-api-for-apache-cassandra-5.0, sonarqube, thingsboard, akhq, dependency-track, sonar-scanner-cli, trino, sonarqube-10, tez, apache-nifi, cassandra-reaper, cassandra...

CVE-2024-12798 vulnerabilities

Vulnerabilities for packages: zookeeper-fips, cassandra, management-api-for-apache-cassandra-4.0, cassandra-reaper, akhq, sonarqube-10, kserve-modelmesh, apache-nifi, sonarqube, thingsboard, ontop-fips, ontop, cassandra-fips, management-api-for-apache-cassandra-5.0, sonar-scanner-cli, trino,...

GHSA-MQVR-2RP8-J7H4 vulnerabilities

Vulnerabilities for packages: apache-nifi...

CVE-2024-38829 vulnerabilities

Vulnerabilities for packages: apache-nifi...

CVE-2024-52067

Apache NiFi 1.16.0 through 1.28.0 and 2.0.0-M1 through 2.0.0-M4 include optional debug logging of Parameter Context values during the flow synchronization process. An authorized administrator with access to change logging levels could enable debug logging for framework flow synchronization, causi...

CVE-2024-52067 Apache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log

Apache NiFi 1.16.0 through 1.28.0 and 2.0.0-M1 through 2.0.0-M4 include optional debug logging of Parameter Context values during the flow synchronization process. An authorized administrator with access to change logging levels could enable debug logging for framework flow synchronization, causi...

CVE-2024-52067

CVE-2024-52067 affects Apache NiFi 1.16.0–1.28.0 and 2.0.0-M1–2.0.0-M4. The issue is optional debug logging of Parameter Context values during flow synchronization, which an authorized admin could enable to write parameter names and values to logs. Deployments with the default Logback config do n...

CVE-2024-52067 Apache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log

Apache NiFi 1.16.0 through 1.28.0 and 2.0.0-M1 through 2.0.0-M4 include optional debug logging of Parameter Context values during the flow synchronization process. An authorized administrator with access to change logging levels could enable debug logging for framework flow synchronization, causi...

CVE-2024-52067 Apache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log

Apache NiFi 1.16.0 through 1.28.0 and 2.0.0-M1 through 2.0.0-M4 include optional debug logging of Parameter Context values during the flow synchronization process. An authorized administrator with access to change logging levels could enable debug logging for framework flow synchronization, causi...