877 matches found
CVE-2024-56512
Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases wher...
CVE-2024-56512 Apache NiFi: Missing Complete Authorization for Parameter and Service References
Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases wher...
CVE-2024-56512 Apache NiFi: Missing Complete Authorization for Parameter and Service References
Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases wher...
CVE-2024-56512 Apache NiFi: Missing Complete Authorization for Parameter and Service References
Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases wher...
CVE-2024-56512
CVE-2024-56512 (Apache NiFi) affects NiFi 1.10.0–2.0.0, where creating a new Process Group omits fine‑grained authorization checks for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers. As a result, authenticated users with permission to create Process Groups ...
Apache NiFi 安全漏洞
Apache NiFi is a data processing and distribution system from the Apache USA Foundation. The system is primarily used for data routing, transformation, and system brokering logic. A security vulnerability exists in Apache NiFi versions 1.10.0 to 2.0.0, which stems from a lack of fine-grained...
PT-2024-10215 · Apache · Apache Nifi
Name of the Vulnerable Software and Affected Versions: Apache NiFi versions 1.10.0 through 2.0.0 Description: The issue is related to missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers when creating new Process...
GHSA-76H9-2VWH-W278 vulnerabilities
Vulnerabilities for packages: hadoop-fips, apache-nifi, jenkins...
GHSA-76H9-2VWH-W278 vulnerabilities
Vulnerabilities for packages: apache-nifi, jenkins...
CVE-2024-52046 vulnerabilities
Vulnerabilities for packages: apache-nifi, jenkins...
CVE-2024-52046 vulnerabilities
Vulnerabilities for packages: hadoop-fips, apache-nifi, jenkins...
GHSA-6V67-2WR5-GVF4 vulnerabilities
Vulnerabilities for packages: hadoop-fips, sonar-scanner-cli, kserve-modelmesh, trino, sonarqube-10, management-api-for-apache-cassandra-4.1, cassandra, apache-nifi, ontop, cassandra-fips, cassandra-reaper, management-api-for-apache-cassandra-5.0, tez, zookeeper-fips, sonarqube, ontop-fips, akhq,...
GHSA-PR98-23F8-JWXV vulnerabilities
Vulnerabilities for packages: hadoop-fips, sonar-scanner-cli, kserve-modelmesh, trino, sonarqube-10, management-api-for-apache-cassandra-4.1, cassandra, apache-nifi, ontop, cassandra-fips, cassandra-reaper, management-api-for-apache-cassandra-5.0, tez, zookeeper-fips, sonarqube, ontop-fips, akhq,...
GHSA-PR98-23F8-JWXV vulnerabilities
Vulnerabilities for packages: apache-nifi, tez, akhq, sonarqube, dependency-track, sonar-scanner-cli, trino, management-api-for-apache-cassandra-5.0, cassandra-reaper, kserve-modelmesh, cassandra, sonarqube-10, thingsboard...
CVE-2024-12801 vulnerabilities
Vulnerabilities for packages: hadoop-fips, sonar-scanner-cli, kserve-modelmesh, trino, sonarqube-10, management-api-for-apache-cassandra-4.1, cassandra, apache-nifi, ontop, cassandra-fips, cassandra-reaper, management-api-for-apache-cassandra-5.0, tez, zookeeper-fips, sonarqube, ontop-fips, akhq,...
CVE-2024-12801 vulnerabilities
Vulnerabilities for packages: apache-nifi, tez, akhq, sonarqube, dependency-track, sonar-scanner-cli, trino, management-api-for-apache-cassandra-5.0, cassandra-reaper, kserve-modelmesh, cassandra, sonarqube-10, thingsboard...
CVE-2024-12798 vulnerabilities
Vulnerabilities for packages: apache-nifi, tez, akhq, sonarqube, dependency-track, sonar-scanner-cli, trino, management-api-for-apache-cassandra-5.0, cassandra-reaper, kserve-modelmesh, cassandra, sonarqube-10, thingsboard...
CVE-2024-12798 vulnerabilities
Vulnerabilities for packages: hadoop-fips, sonar-scanner-cli, kserve-modelmesh, trino, sonarqube-10, management-api-for-apache-cassandra-4.1, cassandra, apache-nifi, ontop, cassandra-fips, cassandra-reaper, management-api-for-apache-cassandra-5.0, tez, zookeeper-fips, sonarqube, ontop-fips, akhq,...