[
https://issues.apache.org/jira/browse/NIFI-7119?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Joe Witt updated NIFI-7119:
---------------------------
Fix Version/s: 1.11.4
> Implement boundary checking for Argon2 cost parameters
> ------------------------------------------------------
>
> Key: NIFI-7119
> URL: https://issues.apache.org/jira/browse/NIFI-7119
> Project: Apache NiFi
> Issue Type: Improvement
> Components: Core Framework
> Affects Versions: 1.11.1
> Reporter: Andy LoPresto
> Assignee: M Tien
> Priority: Major
> Labels: beginner, boundary, hashing, security, validation
> Fix For: 1.12.0, 1.11.4
>
> Time Spent: 1h 20m
> Remaining Estimate: 0h
>
> The {{Argon2}} secure hasher added for the flow fingerprint fix does not
> enforce boundaries around the cost parameters provided to the various
> constructors. It should restrict provided values to valid entries as noted in
> the Javadoc.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
