Search for packages
| purl | pkg:maven/org.apache.nifi.registry/nifi-registry-web-api@0.1.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-6xux-6rk7-gygr
Aliases: CVE-2020-9482 GHSA-rcwj-2hj2-vmjj |
Insufficient Session Expiration If NiFi Registry to uses an authentication mechanism other than PKI, when the user clicks Log Out, NiFi Registry invalidates the authentication token on the client side but not on the server side. This permits the user's client-side token to be used for up to hours after logging out to make API requests to NiFi Registry. |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||