Количество 2
Количество 2
CVE-2020-9491
In Apache NiFi 1.2.0 to 1.11.4, the NiFi UI and API were protected by mandating TLS v1.2, as well as listening connections established by processors like ListenHTTP, HandleHttpRequest, etc. However intracluster communication such as cluster request replication, Site-to-Site, and load balanced queues continued to support TLS v1.0 or v1.1.
GHSA-rfmp-jvr7-hx78
Inadequate Encryption Strength in Apache NiFi
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2020-9491 In Apache NiFi 1.2.0 to 1.11.4, the NiFi UI and API were protected by mandating TLS v1.2, as well as listening connections established by processors like ListenHTTP, HandleHttpRequest, etc. However intracluster communication such as cluster request replication, Site-to-Site, and load balanced queues continued to support TLS v1.0 or v1.1. | CVSS3: 7.5 | 3% Низкий | больше 5 лет назад |
| GHSA-rfmp-jvr7-hx78 Inadequate Encryption Strength in Apache NiFi | CVSS3: 7.5 | 3% Низкий | около 4 лет назад |
Уязвимостей на страницу