CVE-2017-5635: Improper Authentication

October 19, 2017 (updated October 3, 2019)

If an anonymous user request is replicated to another node, the originating node identity is used rather than the “anonymous” user.

References

www.securityfocus.com/bid/96730
nifi.apache.org/security.html
nvd.nist.gov/vuln/detail/CVE-2017-5635

Code Behaviors & Features

Detect and mitigate CVE-2017-5635 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →