Lucene search
Veracode Vulnerability DatabaseVERACODE:27509HistoryOct 02, 2020 - 5:06 a.m.
Denial Of Service (DoS)
2020-10-0205:06:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
47.6%
nifi-web-security is vulnerable to denial of service. The NiFi download token (one-time password) mechanism used a fixed cache size and does not authenticate a request to create a download token. This allows an unauthenticated user to repeatedly request download tokens, preventing legitimate users from requesting download tokens.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nifi-web-security | le | 1.11.4 |
Related
osv
osv
Missing Authentication for Critical Function in Apache NiFi
2022-01-06 20:41:04
CVE-2020-9487
2020-10-01 20:15:14
cvelist
cvelist
CVE-2020-9487
2020-10-01 19:53:11
cve
cve
CVE-2020-9487
2020-10-01 20:15:14
nvd
nvd
CVE-2020-9487
2020-10-01 20:15:14
prion
prion
Cross site request forgery (csrf)
2020-10-01 20:15:00
github
github
Missing Authentication for Critical Function in Apache NiFi
2022-01-06 20:41:04