CVE-2019-12421

When using an authentication mechanism other than PKI, when the user clicks Log Out in NiFi versions 1.0.0 to 1.9.2, NiFi invalidates the authentication token…

published November 19, 2019

CVSS
—
EPSS
2%
Percentile
78.9
In the wild
Unconfirmed
What it is

When using an authentication mechanism other than PKI, when the user clicks Log Out in NiFi versions 1.0.0 to 1.9.2, NiFi invalidates the authentication token on the client side but not on the server side. This permits the user's client-side token to be used for up to 12 hours after logging out to make API requests to NiFi.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01846 · 78.9th percentile
Published
2019-11-19T21:33Z
EPSS history
Timeline
  • 19 NOV 21:33Z
    When using an authentication mechanism other than PKI, when the user clicks Log Out in NiFi versions 1.0.0 to 1.9.2, NiFi invalidates the authentication token…
    cvelistv5