Lucene search
IBME117BB3BA2EA13A92112426BEA63593A9994940462D934F507D031D920CCE0C9HistoryAug 07, 2018 - 7:52 p.m.
Security Bulletin: A security vulnerability has been identified in Node.js hoek shipped with Data Science Experience Local
2018-08-0719:52:59
www.ibm.com
10
0.01 Low
EPSS
Percentile
83.9%
Summary
Node.js hoek is shipped as a component of Data Science Experience Local. Information about a security vulnerability affecting Node.js hoek has been published in a security bulletin.
Vulnerability Details
Please consult the security bulletin(s): CVE-2018-3728 for vulnerability details and information about fixes.
Affected Products and Versions
| Principal Product and Version(s) | Affected Supporting Product and Versions |
|---|---|
| IBM Data Science Experience Local 1.1.0 | hoek 2.16.3 |
| IBM Data Science Experience Local 1.1.1 | hoek 2.16.3 |
| IBM Data Science Experience Local 1.1.2 | hoek 2.16.3 |
| IBM Data Science Experience Local 1.1.3 | hoek 2.16.3 |
| IBM Data Science Experience Local 1.2.0 | hoek 2.16.3 |
Remediation/Fixes
| Product | VRMF | APAR | Remediation / First Fix |
|---|---|---|---|
| IBM Data Science Experience Local | 1.2.1 | <APAR> | A link to the fix will be added here before the bulletin is published |
Workarounds and Mitigations
None
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm data science experience local | eq | any |
Related
hackerone
hackerone
Node.js third-party modules: Prototype pollution attack (Hoek)
2018-01-30 06:24:55
cve
cve
CVE-2018-3728
2018-03-30 19:29:00
redhatcve
redhatcve
CVE-2018-3728
2020-04-01 02:12:07
osv
osv
Prototype Pollution in hoek
2018-04-26 15:25:17
CVE-2018-3728
2018-03-30 19:29:00
prion
prion
Code injection
2018-03-30 19:29:00
cvelist
cvelist
CVE-2018-3728
2018-03-30 19:00:00
nvd
nvd
CVE-2018-3728
2018-03-30 19:29:00
ubuntucve
ubuntucve
CVE-2018-3728
2018-03-30 00:00:00
debiancve
debiancve
CVE-2018-3728
2018-03-30 19:29:00
nessus
nessus
RHEL 8 : hoek (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 8 : nodejs-hoek (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 7 : Red Hat Mobile Application Platform 4.6.0 (RHSA-2018:1263)
2018-05-04 00:00:00
veracode
veracode
Prototype Pollution
2018-02-15 05:41:21
nodejs
nodejs
Prototype Pollution
2018-04-20 21:25:58
github
github
Prototype Pollution in hoek
2018-04-26 15:25:17
redhat
redhat
0.01 Low
EPSS
Percentile
83.9%
Related for E117BB3BA2EA13A92112426BEA63593A9994940462D934F507D031D920CCE0C9