PT-2022-1546 · Node.Js +7 · Node.Js +7

🗓️ 24 Jan 2020 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 24 Views

Node.js certificate subject handling allows spoofing via multi-value relative distinguished names; upgrade affected versions.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM Aspera Orchestrator affected by OpenSSL vulnerability (CVE-2021-3712)	2 Feb 202317:14	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in XStream affect IBM Spectrum Copy Data Management	11 Dec 202100:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL may affect IBM Workload Scheduler	8 Sep 202109:42	–	ibm
IBM Security Bulletins	Security Bulletin:IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from openssl, pcre2 and Golang Go	31 Aug 202216:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is impacted by a vulnerabilities in Node.js (CVE-2021-22884, CVE-2021-22883)	1 Nov 202120:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i Modernization Engine for Lifecycle Integration is vulnerable to multiple vulnerabilities	16 May 202420:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	23 Sep 202222:05	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of Service vulnerability in OpenSSL may affect IBM Spectrum Protect Backup-Archive Client (CVE-2022-0778)	29 Jun 202219:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Rational ClearQuest	29 Jun 202115:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus are vulnerable to a remote attacker due to Node.js (CVE-2022-43548 & CVE-2022-35256)	6 Jan 202314:37	–	ibm

Source	Link
github	www.github.com/terorie/cve-2021-3449
github	www.github.com/riptl/cve-2021-3449
github	www.github.com/drago-96/CVE-2022-0778
github	www.github.com/alcaparra/CVE-2022-1292
github	www.github.com/Marynk/JavaScript-vulnerability-detection/blob/main/minimist%20PoC.zip
github	www.github.com/yywing/cve-2022-0778
github	www.github.com/jkakavas/CVE-2022-0778-POC
github	www.github.com/MBHudson/CVE-2020-1971
github	www.github.com/masahiro331/CVE-2020-8277
github	www.github.com/greek0x0/CVE-2022-1292

16 Dec 2024 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 27.1 - 10

CVSS 3.19.8

CVSS 36.5

EPSS0.87816

SSVC