ZoomEye finds 6,093 exposed Apache NiFi hosts

A ZoomEye scan found 6,093 hosts running Apache NiFi exposed online. NiFi stores credentials for databases, brokers and APIs, and access to its interface allows redirecting data flows.

• ZoomEye query for app="Apache NiFi" returned 6,093 matching hosts
• NiFi flow configurations hold credentials for databases, brokers and APIs
• Interface access lets an attacker redirect where data goes
• Experts advise requiring authentication and removing anonymous access