Node.js Module mariadb < 3.2.4 / 3.3.3 / 3.4.6 / 3.5.3 Information Disclosure

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(342635);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/09/03");

  script_cve_id("CVE-2026-55215");
  script_cwe_id(295, 522);

  script_name(english:"Node.js Module mariadb < 3.2.4 / 3.3.3 / 3.4.6 / 3.5.3 Information Disclosure");

  script_set_attribute(attribute:"synopsis", value:
"A module in the Node.js JavaScript run-time environment is affected by an information disclosure vulnerability.");
  script_set_attribute(attribute:"description", value:
"The version of the MariaDB Connector/Node.js (mariadb) module detected on the host is prior to 3.2.4, 3.3.3, 3.4.6, or
3.5.3. It is, therefore, affected by an information disclosure vulnerability. When SSL/TLS is enabled but no CA or
server certificate is provided, the connector validates the server identity by fingerprint only after the
authentication exchange, so credentials are transmitted before validation occurs. An active man-in-the-middle can
capture those credentials.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://github.com/advisories/GHSA-cqhc-2h57-wpxf");
  script_set_attribute(attribute:"solution", value:
"Upgrade to mariadb version 3.2.4 / 3.3.3 / 3.4.6 / 3.5.3 or later.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-55215");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/08/28");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/08/28");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/09/03");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"asset_categories", value:"component");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:mariadb:connector_nodejs");
  script_set_attribute(attribute:"agent", value:"all");
  script_set_attribute(attribute:"thorough_tests", value:"true");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("nodejs_modules_win_installed.nbin", "nodejs_modules_linux_installed.nbin", "nodejs_modules_mac_installed.nbin");
  script_require_keys("installed_sw/Node.js", "Host/nodejs/modules/enumerated");

  exit(0);
}

include('vcf_extras_nodejs.inc');

var app_info = vcf_extras::nodejs_modules::get_app_info(app:'mariadb');

if (empty_or_null(app_info))
  audit(AUDIT_NOT_INST, 'mariadb');

vcf::check_all_backporting(app_info:app_info);

var constraints = [
  {'fixed_version': '3.2.4'},
  {'min_version': '3.3.0', 'fixed_version': '3.3.3'},
  {'min_version': '3.4.0', 'fixed_version': '3.4.6'},
  {'min_version': '3.5.0', 'fixed_version': '3.5.3'}
];

vcf::check_version_and_report(app_info:app_info, constraints:constraints, severity:SECURITY_HOLE);