Lucene search
Veracode Vulnerability DatabaseVERACODE:35015HistoryApr 07, 2022 - 1:04 p.m.
Information Disclosure
2022-04-0713:04:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.0005 Low
EPSS
Percentile
17.3%
NiFi Single User Utilities is vulnerable to information disclosure. The vulnerability exists in writeLoginCredentials function due to temporary file creation of NiFi containing credential information in a global directory which allows an attacker to gain read access and perform unauthorized actions.
Related
osv
osv
Insufficiently Protected Credentials via Insecure Temporary File in org.apache.nifi:nifi-single-user-utils
2022-06-20 22:33:41
CVE-2022-26850
2022-04-06 18:15:09
prion
prion
Design/Logic Flaw
2022-04-06 18:15:00
cve
cve
CVE-2022-26850
2022-04-06 18:15:09
nvd
nvd
CVE-2022-26850
2022-04-06 18:15:09
cvelist
cvelist
CVE-2022-26850 Insufficiently protected credentials
2022-04-06 17:40:09
github
github