CVE-2020-1942: Apache Nifi

High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days.

In Apache NiFi 0.0.1 to 1.11.0, the flow fingerprint factory generated flow fingerprints which included sensitive property descriptor values. In the event a node attempted to join a cluster and the cluster flow was not inheritable, the flow fingerprint of both the cluster and local flow was printed, potentially containing sensitive values in plaintext.

Affected products

• Apache Nifi: from 0.0.1, up to and including 1.11.0

Published 2020-02-11. Last modified 2026-06-17.