org.apache.nifi:nifi-framework-nar (>=1.1.0 <=1.12.1), org.apache.nifi:nifi-jetty (>=1.1.0 <=1.15.3) +3 more potentially affected by CVE-2024-56512 via org.apache.nifi:nifi-web-api (>=1.10.0 <=2.0.0)

org.apache.nifi:nifi-web-api MAVEN version =1.10.0, =1.1.0, =1.1.0, =1.13.0, =1.11.0, =1.10.0, =2.0.0-M4 Source cves: CVE-2024-56512 Source advisory: OSV:GHSA-MPJ7-7MG7-X95J...

GHSA-MPJ7-7MG7-X95J Apache NiFi: Missing Complete Authorization for Parameter and Service References

Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases wher...

Apache NiFi: Missing Complete Authorization for Parameter and Service References

Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases wher...

CVE-2024-56512

Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases wher...

CVE-2024-56512 Apache NiFi: Missing Complete Authorization for Parameter and Service References

Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases wher...

CVE-2024-56512

CVE-2024-56512 (Apache NiFi) affects NiFi 1.10.0–2.0.0, where creating a new Process Group omits fine‑grained authorization checks for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers. As a result, authenticated users with permission to create Process Groups ...

CVE-2024-56512 Apache NiFi: Missing Complete Authorization for Parameter and Service References

Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases wher...

CVE-2024-56512 Apache NiFi: Missing Complete Authorization for Parameter and Service References

Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases wher...

Apache NiFi 安全漏洞

Apache NiFi is a data processing and distribution system from the Apache USA Foundation. The system is primarily used for data routing, transformation, and system brokering logic. A security vulnerability exists in Apache NiFi versions 1.10.0 to 2.0.0, which stems from a lack of fine-grained...

PT-2024-10215 · Apache · Apache Nifi

Name of the Vulnerable Software and Affected Versions: Apache NiFi versions 1.10.0 through 2.0.0 Description: The issue is related to missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers when creating new Process...

GHSA-76H9-2VWH-W278 vulnerabilities

Vulnerabilities for packages: jenkins, apache-nifi...

GHSA-76H9-2VWH-W278 vulnerabilities

Vulnerabilities for packages: hadoop-fips, jenkins, apache-nifi...

CVE-2024-52046 vulnerabilities

Vulnerabilities for packages: hadoop-fips, jenkins, apache-nifi...

CVE-2024-52046 vulnerabilities

Vulnerabilities for packages: jenkins, apache-nifi...

GHSA-6V67-2WR5-GVF4 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, cassandra, sonarqube, management-api-for-apache-cassandra-4.1, akhq, cassandra-fips, tez, ontop, sonarqube-10, thingsboard, kserve-modelmesh, management-api-for-apache-cassandra-5.0, ontop-fips, dependency-track, sonar-scanner-cli, trino, apache-nif...

GHSA-PR98-23F8-JWXV vulnerabilities

Vulnerabilities for packages: cassandra-reaper, cassandra, apache-nifi, kserve-modelmesh, sonarqube, sonarqube-10, tez, akhq, management-api-for-apache-cassandra-5.0, sonar-scanner-cli, thingsboard, trino, dependency-track...

GHSA-PR98-23F8-JWXV vulnerabilities

Vulnerabilities for packages: cassandra-reaper, cassandra, sonarqube, management-api-for-apache-cassandra-4.1, akhq, cassandra-fips, tez, ontop, sonarqube-10, thingsboard, kserve-modelmesh, management-api-for-apache-cassandra-5.0, ontop-fips, dependency-track, sonar-scanner-cli, trino, apache-nif...

CVE-2024-12801 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, cassandra, sonarqube, management-api-for-apache-cassandra-4.1, akhq, cassandra-fips, tez, ontop, sonarqube-10, thingsboard, kserve-modelmesh, management-api-for-apache-cassandra-5.0, ontop-fips, dependency-track, sonar-scanner-cli, trino, apache-nif...

CVE-2024-12801 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, cassandra, apache-nifi, kserve-modelmesh, sonarqube, sonarqube-10, tez, akhq, management-api-for-apache-cassandra-5.0, sonar-scanner-cli, thingsboard, trino, dependency-track...

CVE-2024-12798 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, cassandra, apache-nifi, kserve-modelmesh, sonarqube, sonarqube-10, tez, akhq, management-api-for-apache-cassandra-5.0, sonar-scanner-cli, thingsboard, trino, dependency-track...