Lucene search
+L

CVE-2022-1650 Improper Removal of Sensitive Information Before Storage or Transfer in eventsource/eventsource

🗓️ 12 May 2022 00:00:00Reported by @huntrdevType 
cvelist
 cvelist
🔗 www.cve.org👁 50 Views

Improper Removal of Sensitive Information Before Storage or Transfer in eventsource/eventsource prior to v2.0.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
ibm
IBM Security Bulletins
Security Bulletin: Open Source Dependency Vulnerability
15 May 202317:59
–ibm
ibm
IBM Security Bulletins
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.1
26 Mar 202502:36
–ibm
ibm
IBM Security Bulletins
Security Bulletin: IBM Planning Analytics Workspace has addressed multiple vulnerabilities
27 Mar 202420:31
–ibm
ibm
IBM Security Bulletins
Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to improper removal of sensitive information before storage or transfer in the console (CVE-2022-1650)
4 Apr 202521:15
–ibm
ibm
IBM Security Bulletins
Security Bulletin: Mutiple vulnerabilties affecting Watson Machine Learning Accelerator on Cloud Pak for Data
12 Dec 202317:39
–ibm
ibm
IBM Security Bulletins
Security Bulletin: NPM GitHub EventSource improper removal of sensitive information (CVE-2022-1650)
1 Nov 202319:39
–ibm
attackerkb
attackerkb
CVE-2022-1650
12 May 202211:15
–attackerkb
bdu_fstec
BDU FSTEC
The vulnerability of the eventsource/eventsource library, related to insufficient protection of operational data, allows a perpetrator to gain unauthorized access to protected information.
6 Jul 202200:00
–bdu_fstec
nessus
Tenable Nessus
Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-6.0 / aspnetcore-targeting-pack-6.0 / dotnet / etc (crlba-2022_5747)
1 Oct 202600:00
–nessus
nessus
Tenable Nessus
Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-3.1 / aspnetcore-targeting-pack-3.1 / etc Multiple Vulnerabilities (crlsa-2022_6057)
1 Oct 202600:00
–nessus
Rows per page
[
  {
    "defaultStatus": "unaffected",
    "product": "eventsource/eventsource",
    "vendor": "eventsource",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "v2.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "v2.0.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "v1.1.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "v1.1.1"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

02 Aug 2023 08:39Current
9.4Critical risk
Vulners AI Score9.4
CVSS 3.18.1
EPSS0.01861
50