Node.js: Node Installer Local Privilege Escalation

🗓️ 28 May 2021 00:40:40Reported by deepsurface-robertType

hackerone

hackerone🔗 hackerone.com👁 417 Views

Node.js local privilege escalation on Window

Reporter	Title	Published	Views	Family All 68
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Cloud Pak for Automation	2 Oct 202100:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Rational® Application Developer for WebSphere® Software - September 2021	30 Sep 202115:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Node.js affect IBM App Connect Enterprise v11 & v12 (CVE-2021-22918 and CVE-2021-22921)	1 Oct 202111:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Integration is vulnerable to multiple Node.js vulnerabilities	15 Oct 202113:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Node.js	29 Oct 202121:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Node.js affects IBM Netcool Agile Service Manager	1 Jun 202213:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities	24 Sep 202116:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Observability with Instana	11 Jan 202220:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, XStream and Apache Commons affect IBM Spectrum Control	31 Aug 202108:17	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Node.js-CVE-2021-23362, CVE-2021-22921, CVE-2021-22918, CVE-2021-27290 may affect IBM Watson Assistant for IBM Cloud Pak for Data.	25 Feb 202220:30	–	ibm

01 Jul 2021 20:00Current

2.3Low risk

Vulners AI Score2.3

EPSS0.00527

node.js windows local privilege escalation vulnerability installation permissions path variable dll hijacking executable security advisory rabbitmq bug bounty