sonatype-2021-0331 Security Details

CVE ID

sonatype-2021-0331

CWE

N/A

CVE Description

nifi-utils - Cryptographic Issues

Published

Mar 22, 2021

CVSS Score & Severity

5.9Medium

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

0%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Vulnerable Methods

com/hortonworks/registries/schemaregistry/client/SchemaRegistryClient.buildSchemaTextEntry(Lcom/hortonworks/registries/schemaregistry/SchemaVersion;Ljava/lang/String;)Lcom/hortonworks/registries/schemaregistry/client/SchemaRegistryClient$SchemaDigestEntry;

JVM

org/apache/nifi/nar/NarUnpacker.calculateMd5sum(Ljava/io/File;)[B

JVM

org/apache/nifi/nar/NarUnpacker.unpackNar(Ljava/io/File;Ljava/io/File;)Ljava/io/File;

JVM

org/apache/nifi/util/file/FileUtils.computeMd5Digest(Ljava/io/File;)[B

JVM

org/apache/nifi/util/file/FileUtils.computeMd5Digest(Ljava/io/InputStream;)[B

JVM

org/apache/nifi/util/file/FileUtils.isSame(Ljava/io/File;Ljava/io/File;)Z

JVM

org/apache/nifi/util/file/classloader/ClassLoaderUtils.generateAdditionalUrlsFingerprint(Ljava/util/Set;)Ljava/lang/String;

JVM

Affected Ecosystems

affected

Source

Sonatype

References

GitHub · PR #4788PROJECT

Apache Jira · NIFI-8132PROJECT