Executive brief
Apache NiFi process group information disclosure
Affected products
- Maven org.apache.nifi:nifi-web-api
- Maven org.apache.nifi:nifi
Junglewise Threat Intelligence
CVE-2019-10083: Apache NiFi process group information disclosure
CVE-2019-10083 · Severity: low · CVSS 3.1 · Published 2019-12-02
Vendors: Maven.
Related threats
- Apache NiFi missing authorization in Process Group replacement
- Apache NiFi incorrect authorization in component configuration verification
- Apache NiFi: Missing Authorization of Restricted Permissions for Component Updates
- Apache NiFi: Missing Complete Authorization for Parameter and Service References
- Code injection in Apache NiFi and NiFi Registry