Lucene search
Veracode Vulnerability DatabaseVERACODE:25080HistoryApr 28, 2020 - 10:16 a.m.
Improper Token Handling
2020-04-2810:16:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
0.001 Low
EPSS
Percentile
43.9%
Apache NiFi Registry is vulnerable to authentication bypass. During logging out, the authentication mechanism other than PKI does not invalidate the token on the server side, but only on the client side, allowing the client to make a API requests up to 12 hours after logging out.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nifi-registry-web-api | le | 0.5.0 |
Related
osv
osv
Insufficient Session Expiration in Apache NiFi Registry
2022-02-09 00:23:06
github
github
Insufficient Session Expiration in Apache NiFi Registry
2022-02-09 00:23:06
nvd
nvd
CVE-2020-9482
2020-04-28 19:15:12
prion
prion
Authentication flaw
2020-04-28 19:15:00
cvelist
cvelist
CVE-2020-9482
2020-04-28 18:12:58
cve
cve
CVE-2020-9482
2020-04-28 19:15:12