Lucene search
Veracode Vulnerability DatabaseVERACODE:21986HistoryNov 20, 2019 - 2:46 a.m.
Improper Session Management
2019-11-2002:46:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
33.7%
nifi-web-api does not properly handle the authentication tokens. When using an authentication mechanism other than PKI, nifi-web-api does not invalidate the server-side authentication tokens when the user clicks log out. This results in the session being valid for another 12 hours despite logging out.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nifi-web-api | le | 1.9.2 |
References
github.com/apache/nifi/commit/cf6f5172503ce438c6c22c334c9367f774db7b24
github.com/apache/nifi/pull/3362
issues.apache.org/jira/browse/NIFI-6085
lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b@%3Ccommits.nifi.apache.org%3E
nifi.apache.org/security.html#CVE-2019-12421
Related
prion
prion
Authentication flaw
2019-11-19 22:15:00
osv
osv
CVE-2019-12421
2019-11-19 22:15:11
Apache NiFi user log out issue
2019-12-02 18:19:39
nvd
nvd
CVE-2019-12421
2019-11-19 22:15:11
cve
cve
CVE-2019-12421
2019-11-19 22:15:11
cvelist
cvelist
CVE-2019-12421
2019-11-19 21:33:12
github
github
Apache NiFi user log out issue
2019-12-02 18:19:39