If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an expired certificate would have been accepted.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-22939US | medium5.3 | — | ||
If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an expired… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://hackerone.com/reports/1278254ADVISORY
- https://lists.debian.org/debian-lts-announce/2022/10/msg00006.htmlADVISORY
- https://nodejs.org/en/blog/vulnerability/aug-2021-security-releases/ADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2021-22939WEB
- https://security.gentoo.org/glsa/202401-02WEB
- https://security.netapp.com/advisory/ntap-20210917-0003/ADVISORY
- https://www.oracle.com/security-alerts/cpujan2022.htmlADVISORY
- https://www.oracle.com/security-alerts/cpujul2022.htmlADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan