CVE-2020-1928

An information disclosure vulnerability was found in Apache NiFi 1.10.0. The sensitive parameter parser would log parsed values for debugging purposes. This would expose literal values entered in a sensitive property when no parameter was present...

org.apache.nifi:nifi-administration (1.10.0), org.apache.nifi:nifi-authorizer (1.10.0) +22 more potentially affected by CVE-2020-1928 via org.apache.nifi:nifi-parameter (1.10.0)

org.apache.nifi:nifi-parameter MAVEN version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.nifi:nifi-parameter and may be impacted: - org.apache.nifi:nifi-administration 1.10.0 - org.apache.nifi:nifi-authorizer 1.10.0 -...

org.apache.nifi:nifi-administration (1.10.0), org.apache.nifi:nifi-authorizer (1.10.0) +22 more potentially affected by CVE-2020-1928 via org.apache.nifi:nifi-parameter (1.10.0)

org.apache.nifi:nifi-parameter MAVEN version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.nifi:nifi-parameter and may be impacted: - org.apache.nifi:nifi-administration 1.10.0 - org.apache.nifi:nifi-authorizer 1.10.0 -...

org.apache.nifi:nifi-administration (1.10.0), org.apache.nifi:nifi-authorizer (1.10.0) +22 more potentially affected by CVE-2020-1928 via org.apache.nifi:nifi-parameter (1.10.0)

org.apache.nifi:nifi-parameter MAVEN version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.nifi:nifi-parameter and may be impacted: - org.apache.nifi:nifi-administration 1.10.0 - org.apache.nifi:nifi-authorizer 1.10.0 -...

CVE-2020-1928

The CVE-2020-1928 entry affects Apache NiFi 1.10.0. The vulnerability is an information disclosure where the sensitive parameter parser logs parsed values for debugging, exposing literal values entered in a sensitive property when no parameter is present. This is described across multiple sources...