PT-2017-16636

Name of the Vulnerable Software and Affected Versions Apache NiFi versions prior to 0.7.2 Apache NiFi versions 1.x prior to 1.1.2 Description The issue allows a carefully crafted username to impersonate another user and gain their permissions on a replicated request to another node in a cluster...