Design/Logic Flaw

🗓️ 06 Apr 2022 17:15:00Reported by PRIOn knowledge baseType

prion

prion🔗 www.prio-n.com👁 31 Views

Async and 3.x design fla

Reporter	Title	Published	Views	Family All 101
IBM Security Bulletins	Security Bulletin: IBM Engineering Workflow Management (EWM) vulnerability CVE-2021-43138	27 Mar 202316:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics Mobile (Android) is affected by multiple vulnerabilities	21 Oct 202415:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics is affected by multiple vulnerabilities	26 Mar 202504:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities	23 Aug 202222:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities (CVE-2022-34339, CVE-2021-3712, CVE-2021-3711, CVE-2021-4160, CVE-2021-29425, CVE-2021-3733, CVE-2021-3737, CVE-2022-0391, CVE-2021-43138, CVE-2022-24758)	26 Mar 202502:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities	6 Jul 202318:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Robotic Process Automation is vulnerable to arbitrary code execution due to async (CVE-2021-43138)	25 Jul 202219:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for May 2022	20 Jun 202213:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container IntegrationServer operands that run Designer flows may be vulnerable to arbitrary code execution due to [CVE-2021-43138]	28 Apr 202311:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities fixed in IBM Security Verify Governance - Identity Manager Virtual Appliance	30 Jun 202305:54	–	ibm

Source	Link
github	www.github.com/caolan/async/blob/master/lib/mapValuesLimit.js
jsfiddle	www.jsfiddle.net/oz5twjd9/
github	www.github.com/caolan/async/blob/master/lib/internal/iterator.js
github	www.github.com/caolan/async/commit/e1ecdbf79264f9ab488c7799f4c76996d5dca66d
github	www.github.com/caolan/async/pull/1828
github	www.github.com/caolan/async/blob/v2.6.4/CHANGELOG.md
github	www.github.com/caolan/async/compare/v2.6.3...v2.6.4
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/MTEUUTNIEBHGKUKKLNUZSV7IEP6IP3Q3/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/UM6XJ73Q3NAM5KSGCOKJ2ZIA6GUWUJLK/

23 Feb 2023 20:20Current

8.5High risk

Vulners AI Score8.5

EPSS0.00657

privilege escalation mapvalues method prototype pollution