CVE-2017-5635

high

Published 2017-10-19 · Modified 2023-11-08

CVSS v3

7.5

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2

5.0

VIR risk

7.5

Description

Improper Authentication In Apache NiFi

Exploit likelihood

83%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

vendor Authored 2026-05-27

Vendor advisory: security@apache.org — https://nifi.apache.org/security.html#CVE-2017-5635

Ecosystem	Package	Vulnerable	Fixed
Maven	org.apache.nifi:nifi	`<0.7.2`	`0.7.2`
Maven	org.apache.nifi:nifi	`>=1.0.0,<1.1.2`	`1.1.2`

Vendor	Product	Versions
apache	nifi	`0.7.0`
apache	nifi	`0.7.1`
apache	nifi	`1.1.0`
apache	nifi	`1.1.1`

CWE-287

Verify integrity in audit chain (admin only). AS-IS.