[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZ-st_PgZpm7BR5hYqBGV8AGVuwGChx0TV_HMmRyvDls":3,"g5a-risk:CVE-2020-9482":105},{"success":4,"data":5,"meta":103},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":26,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":47,"references":48,"referencesCount":47,"weaknesses":55,"weaknessesCount":47,"isActivelyExploited":64,"cisaInfo":26,"otxData":26,"relatedBlogPosts":65,"seoMetadata":66,"configurations":91,"relatedVendorCves":101,"notableEvents":102},"CVE-2020-9482","What is CVE-2020-9482?","If NiFi Registry 0.1.0 to 0.5.0 uses an authentication mechanism other than PKI, when the user clicks Log Out, NiFi Registry invalidates the authentication token on the client side but not on the server side. This permits the user's client-side token to be used for up to 12 hours after logging out to make API requests to NiFi Registry.","If NiFi Registry 0.1.0 to 0.5.0 uses an authentication mechanism other than PKI, when the user clicks Log Out, NiFi Registry invalidates the authentication t...","2020-04-28T19:15:12.47","2020-05-05T20:27:12.893",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,2.5,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":25,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:N","PARTIAL",6.4,10,4.9,0.02672,[38,38,38,38,38,38,38],"Medium",[42],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"apache","nifi_registry","*","cpe:2.3:a:apache:nifi_registry:*:*:*:*:*:*:*:*",1,[49],{"url":50,"source":51,"tags":52},"https:\u002F\u002Fnifi.apache.org\u002Fregistry-security.html#CVE-2020-9482","Apache",[53,54],"Patch","Vendor Advisory",[56],{"id":57,"name":58,"description":59,"extendedDescription":60,"status":61,"abstraction":62,"structure":63},"CWE-613","Insufficient Session Expiration","According to WASC, \"Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization.\"","","Incomplete","Base","Simple",false,[],{"title":67,"metaDescription":68,"keywords":69,"canonicalUrl":70,"structuredData":71},"What is CVE-2020-9482? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-9482, a medium severity cyber security vulnerability from 2020. If NiFi Registry 0.1.0 to 0.5.0 uses an authentication mec...","CVE-2020-9482, CVE-2020-9482 vulnerability, CVE-2020-9482 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, apache security, nifi_registry vulnerability","\u002Fwhat-is\u002Fcve-2020-9482",{"@context":72,"@type":73,"headline":67,"description":68,"datePublished":10,"dateModified":11,"author":74,"publisher":78,"about":82,"mainEntityOfPage":86,"articleSection":89,"keywords":90},"https:\u002F\u002Fschema.org","TechArticle",{"@type":75,"name":76,"url":77},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":75,"name":76,"url":77,"logo":79},{"@type":80,"url":81},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":83,"name":6,"description":84,"additionalType":85},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":87,"@id":88},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-9482","Cybersecurity","CVE-2020-9482, CVE-2020-9482 vulnerability, CVE-2020-9482 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[92],{"Operator":26,"Negate":26,"Nodes":93},[94],{"Operator":95,"Negate":26,"CPEMatch":96},"OR",[97],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":98,"VersionStartExcluding":26,"VersionStartIncluding":99,"VersionEndExcluding":26,"VersionEndIncluding":100},"E8ED43B2-B4F2-4C8C-A90A-AABEB0C1A108","0.1.0","0.5.0",[],[],{"lastModified":11,"cacheTime":104,"version":32},1792353148737,{"score":106,"band":107,"action":108,"scoredAt":109},24,"Low","Monitor","2026-10-16T06:48:33.044819+00:00"]