sonatype-2021-0828 Security Details

CVE ID

sonatype-2021-0828

CWE

N/A

CVE Description

nifi-utils - Cryptographic Issues

Published

Jul 16, 2021

CVSS Score & Severity

6.5Medium

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

EPSS Score

0%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Vulnerable Methods

com/hortonworks/registries/schemaregistry/client/SchemaRegistryClient.buildSchemaTextEntry(Lcom/hortonworks/registries/schemaregistry/SchemaVersion;Ljava/lang/String;)Lcom/hortonworks/registries/schemaregistry/client/SchemaRegistryClient$SchemaDigestEntry;

JVMVulnerable params: 0

org/apache/nifi/nar/NarUnpacker.calculateMd5sum(Ljava/io/File;)[B

JVMVulnerable params: 0

org/apache/nifi/util/file/FileUtils.computeMd5Digest(Ljava/io/InputStream;)[B

JVMVulnerable params: 0

org/apache/nifi/util/file/classloader/ClassLoaderUtils.generateAdditionalUrlsFingerprint(Ljava/util/Set;)Ljava/lang/String;

JVMVulnerable params: 0

Affected Ecosystems

affected

Source

Sonatype

References

GitHub · PR #4788PROJECT

Apache Jira · NIFI-8132PROJECT