The vulnerability of the `process.mainModule.proto.require()` function in the Node.js software platform allows a attacker to compromise the integrity of the protected information.

🗓️ 24 Aug 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Node.js vulnerability in process main module causes authentication errors and data integrity breach.

Reporter	Title	Published	Views	Family All 184
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Node.js	27 Sep 202321:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to several vulnerabilities in Node.js due to [CVE-2023-30581] [CVE-2023-30588] [CVE-2023-30589] [CVE-2023-30590]	7 Sep 202315:11	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to permissions bypass, privilege escalation, key generation failure, denial of service and request smuggling due to vulnerabilities in Node.js	18 Aug 202308:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM SDK for Node.js and packaged modules affect IBM Business Automation Workflow Configuration Editor	26 Sep 202308:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Control is vulnerable to multiple weaknesses related to Node.js	29 Apr 202502:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities present in IBM Answer Retrieval for Watson Discovery versions 2.12 and earlier	8 Aug 202322:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Symphony with Node.js various security issues	29 Apr 202522:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js affects IBM Voice Gateway	31 Jan 202413:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by multiple vulnerabilities in Node.js	1 Aug 202309:43	–	ibm
Tenable Nessus	Amazon Linux 2023 : nodejs, nodejs-devel, nodejs-full-i18n (ALAS2023-2023-237)	20 Jul 202300:00	–	nessus

Vulners

Node

node.js node.jsRange16.0.0–16.20.1

node.js node.jsRange18.0.0–18.16.1

node.js node.jsRange20.0.0–20.3.1

red_hat red_hat_enterprise_linuxMatch8

red_hat red_hat_enterprise_linuxMatch9

Source	Link
nodejs	www.nodejs.org/en/blog/vulnerability/june-2023-security-releases
access	www.access.redhat.com/security/cve/cve-2023-30581
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2023082404
vuldb	www.vuldb.com/
altsp	www.altsp.su/obnovleniya-bezopasnosti/
web	www.web.nvd.nist.gov/view/vuln/detail

14 Nov 2024 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 37.5

CVSS 27.8

EPSS0.00875