Beveiligingsadvies

CVE-2019-10083

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-11-19 21:34:11

Laatst bijgewerkt 2024-08-04 22:10:09

Toegewezen door apache

CVSS-score geen score

Status PUBLISHED

Beschrijving

When updating a Process Group via the API in NiFi versions 1.3.0 to 1.9.2, the response to the request includes all of its contents (at the top most level, not recursively). The response included details about processors and controller services which the user may not have had read access to.

← Alle CVE's bekijken Bekijk op cve.org ↗