{"action":"Upgrade org.apache.nifi:nifi to 1.12.0-RC1 or later.","affected":[{"fixed":"1.12.0-RC1","introduced":"1.2.0"}],"component":"org.apache.nifi:nifi","cve_ids":["CVE-2020-9491"],"ecosystem":"Maven","epss":0.02871,"exploited":false,"fixed_versions":["1.12.0-RC1"],"ghsa_id":"GHSA-rfmp-jvr7-hx78","id":"tcs_01M5N9BR3ZPTWK0W1AH3VFFBDP","modified_at":"2025-09-15T07:42:08.359565Z","published_at":"2022-01-06T20:41:06Z","references":["https://osv.dev/vulnerability/GHSA-rfmp-jvr7-hx78","https://nvd.nist.gov/vuln/detail/CVE-2020-9491","https://github.com/apache/nifi/commit/441781cec50f77d9f1e65093f55bbd614b8c5ec6","https://github.com/apache/nifi","https://lists.apache.org/thread.html/r2d9c21f9ec35d66f2bb42f8abe876dabd786166b6284e9a33582c718@%3Ccommits.nifi.apache.org%3E","https://lists.apache.org/thread.html/re48582efe2ac973f8cff55c8b346825cb491c71935e15ab2d61ef3bf@%3Ccommits.nifi.apache.org%3E","https://nifi.apache.org/security#CVE-2020-9491"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-rfmp-jvr7-hx78","url":"https://osv.dev/vulnerability/GHSA-rfmp-jvr7-hx78"}],"summary":"Inadequate Encryption Strength in Apache NiFi"}