CVE-2017-5636 | BDVDB-2026-91771 Detail

Description#

In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, the proxy chain serialization/deserialization is vulnerable to an injection attack where a carefully crafted username could impersonate another user and gain their permissions on a replicated request to another node.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12017-10-19Record published in the CVE List.
2. Version 22024-08-05Most recent update recorded in the CVE List.