Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2026/01/07 9:27 a.m.•17 views

CVE-2019-12421

When using an authentication mechanism other than PKI, when the user clicks Log Out in NiFi versions 1.0.0 to 1.9.2, NiFi invalidates the authentication token on the client side but not on the server side. This permits the user's client-side token to be used for up to 12 hours after logging out t...

8.8CVSS7AI score0.01846EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2019-0789

Malware in sbrugna...

8.8CVSS8.6AI score0.01846EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2022-1170

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.02672EPSS
SaveExploits0References5
CVE
CVE
•added 2020/04/28 6:12 p.m.•100 views

CVE-2020-9482

CVE-2020-9482 affects NiFi Registry versions 0.1.0 to 0.5.0. The root cause is using an authentication mechanism other than PKI where, on logout, the server does not invalidate the token; only the client-side token is invalidated. As a result, the token may remain usable for up to 12 hours after ...

6.5CVSS6.5AI score0.02672EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/28 12:00 a.m.•4 views

CVE-2020-9482: Insufficient Session Expiration

If NiFi Registry 0.1.0 to 0.5.0 uses an authentication mechanism other than PKI, when the user clicks Log Out, NiFi Registry invalidates the authentication token on the client side but not on the server side. This permits the user's client-side token to be used for up to 12 hours after logging ou...

6.5CVSS6.5AI score0.02672EPSS
SaveExploits0References2
OSV
OSV
•added 2019/12/02 6:19 p.m.•33 views

GHSA-FMQW-VQH5-CWQ9 Apache NiFi user log out issue

When using an authentication mechanism other than PKI, when the user clicks Log Out in NiFi versions 1.0.0 to 1.9.2, NiFi invalidates the authentication token on the client side but not on the server side. This permits the user's client-side token to be used for up to 12 hours after logging out t...

8.8CVSS8.7AI score0.01846EPSS
SaveExploits0References5
NVD
NVD
•added 2019/11/19 10:15 p.m.•27 views

CVE-2019-12421

When using an authentication mechanism other than PKI, when the user clicks Log Out in NiFi versions 1.0.0 to 1.9.2, NiFi invalidates the authentication token on the client side but not on the server side. This permits the user's client-side token to be used for up to 12 hours after logging out t...

8.8CVSS8.7AI score0.01846EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/11/19 9:33 p.m.•29 views

CVE-2019-12421

When using an authentication mechanism other than PKI, when the user clicks Log Out in NiFi versions 1.0.0 to 1.9.2, NiFi invalidates the authentication token on the client side but not on the server side. This permits the user's client-side token to be used for up to 12 hours after logging out t...

8.8AI score0.01846EPSS
SaveExploits0References2
Rows per page
Query Builder