Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/01/07 9:27 a.m.7 views

CVE-2019-12421

When using an authentication mechanism other than PKI, when the user clicks Log Out in NiFi versions 1.0.0 to 1.9.2, NiFi invalidates the authentication token on the client side but not on the server side. This permits the user's client-side token to be used for up to 12 hours after logging out t...

8.8CVSS7AI score0.01846EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-0789

Malware in sbrugna...

8.8CVSS8.6AI score0.01846EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2022-1170

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.02607EPSS
Exploits0References5
CVE
CVE
added 2020/04/28 6:12 p.m.81 views

CVE-2020-9482

CVE-2020-9482 affects NiFi Registry versions 0.1.0 to 0.5.0. The root cause is using an authentication mechanism other than PKI where, on logout, the server does not invalidate the token; only the client-side token is invalidated. As a result, the token may remain usable for up to 12 hours after ...

6.5CVSS6.5AI score0.02607EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2019/12/02 6:19 p.m.29 views

GHSA-FMQW-VQH5-CWQ9 Apache NiFi user log out issue

When using an authentication mechanism other than PKI, when the user clicks Log Out in NiFi versions 1.0.0 to 1.9.2, NiFi invalidates the authentication token on the client side but not on the server side. This permits the user's client-side token to be used for up to 12 hours after logging out t...

8.8CVSS8.7AI score0.01846EPSS
Exploits0References5
NVD
NVD
added 2019/11/19 10:15 p.m.18 views

CVE-2019-12421

When using an authentication mechanism other than PKI, when the user clicks Log Out in NiFi versions 1.0.0 to 1.9.2, NiFi invalidates the authentication token on the client side but not on the server side. This permits the user's client-side token to be used for up to 12 hours after logging out t...

8.8CVSS8.7AI score0.01846EPSS
Exploits0References2
Cvelist
Cvelist
added 2019/11/19 9:33 p.m.15 views

CVE-2019-12421

When using an authentication mechanism other than PKI, when the user clicks Log Out in NiFi versions 1.0.0 to 1.9.2, NiFi invalidates the authentication token on the client side but not on the server side. This permits the user's client-side token to be used for up to 12 hours after logging out t...

8.8AI score0.01846EPSS
Exploits0References2
Rows per page
Query Builder