CVE-2017-5635

CVE-2017-5635 describes an authentication bypass vulnerability in Apache NiFi versions prior to 0.7.2 and 1.1.2 when operating in a cluster. An anonymous user's replicated request could be processed with the originating node's identity, bypassing intended access controls. This vulnerability has a CVSS score of 7.5 (High), indicating it can be exploited remotely with low complexity to achieve high confidentiality impact without requiring user interaction or privileges. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.