← CVE Intelligence

CVE-2020-9486

n/a / Apache NiFi PUBLISHED

Description (CNA)

In Apache NiFi 1.10.0 to 1.11.4, the NiFi stateless execution engine produced log output which included sensitive property values. When a flow was triggered, the flow definition configuration JSON was printed, potentially containing sensitive values in plaintext.

Affected (CNA)

Vendor / productVersions
n/a / Apache NiFiaffected Apache NiFi 1.10.0 to 1.11.4

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.