CVE-2017-5636
CVE-2017-5636
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 3.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
19 Oct 2017Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, the proxy chain serialization/deserialization is vulnerable to an injection attack where a carefully crafted username could impersonate another user and gain their permissions on a replicated request to another node.
Affected products
Apache Software Foundation · Apache NiFiWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →