2 matches found
CVE-2023-41180
Incorrect certificate validation in InvokeHTTP on Apache NiFi MiNiFi C++ versions 0.13 to 0.14 allows an intermediary to present a forged certificate during TLS handshake negotation. The Disable Peer Verification property of InvokeHTTP was effectively flipped, disabling verification by default,...
5.9CVSS5.7AI score0.00419EPSS
SaveExploits0References1
CVE-2023-41180
CVE-2023-41180 affects Apache NiFi MiNiFi C++: InvokeHTTP in versions 0.13 to 0.14 has incorrect certificate validation, allowing an intermediary to present a forged certificate during TLS handshake because the Disable Peer Verification setting was effectively flipped, disabling verification by d...
5.9CVSS5.7AI score0.00419EPSS
SaveExploits0References1Affected Software1
20