Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-9491

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-rfmp-jvr7-hx78

Inadequate Encryption Strength in Apache NiFi In Apache NiFi 1.2.0 to 1.11.4, the NiFi UI and API were protected by mandating TLS v1.2, as well as listening connections established by processors like ListenHTTP, HandleHttpRequest, etc. However intracluster communication such as cluster request replication, Site-to-Site, and load balanced queues continued to support TLS v1.0 or v1.1.

gitlab/maven/org.apache.nifi/nifi/CVE-2020-9491

Inadequate Encryption Strength In Apache NiFi, the NiFi UI and API were protected by mandating TLS v1.2, as well as listening connections established by processors like ListenHTTP, HandleHttpRequest, etc. However, intracluster communication such as cluster request replication, Site-to-Site, and load balanced queues continued to support TLS v1.0 or v1.1.