com.srotya.tau:nifi-lmm-interceptor (>=0.0.5 <=0.0.8), io.dstream.nifi:dstream-nifi (=1.0.0.M2) +248 more potentially affected by CVE-2020-1942 via org.apache.nifi:nifi-security-utils (>=0.0.2-incubating <=1.11.4)

org.apache.nifi:nifi-security-utils MAVEN version =0.0.2-incubating, =0.0.5, =0.0.20, =2.27.2, =0.0.0, =3.1.0-35emr770 - org.apache.nifi.minifi:minifi-bootstrap =0.0.1 - org.apache.nifi.minifi:minifi-framework-core =0.0.1 - org.apache.nifi.minifi:minifi-framework-nar =0.0.1 -...

CVE-2020-1942

CVE-2020-1942 affects Apache NiFi versions 0.0.1 through 1.11.0. The root cause involves the flow fingerprint factory generating flow fingerprints that include sensitive property descriptor values, which can be exposed when a node joins a cluster and the cluster flow is not inheritable; the finge...