PT-2023-9603 · Node.Js · Node.Js

🗓️ 05 Jul 2023 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Node.js 20.x uses deprecated process.binding() enabling path traversal and bypass of the permission model.

Reporter	Title	Published	Views	Family All 393
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by a vulnerability in Node.js (CVE-2023-32006)	29 Nov 202322:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 9.0.1	16 Nov 202315:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by a vulnerability in Node.js (CVE-2023-32559)	29 Nov 202322:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to multiple Node.js vulnerabilities	31 Jan 202413:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Dashboards on Cloud Pak for Data 4.8.0 has addressed security vulnerabilities	29 Nov 202322:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM SDK for Node.js and packaged modules affect IBM Business Automation Workflow Configuration Editor	26 Sep 202308:26	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Pulse application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	5 Feb 202415:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Control is vulnerable to multiple weaknesses related to Node.js	29 Apr 202502:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by a vulnerability in Node.js Module._load() module (CVE-2023-32002)	29 Nov 202322:26	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.11 addresses multiple security vulnerabilities.	20 Dec 202316:10	–	ibm

Source	Link
hackerone	www.hackerone.com/reports/2051257
osv	www.osv.dev/vulnerability/BIT-node-2023-32558
osv	www.osv.dev/vulnerability/BIT-node-min-2023-32558
bdu	www.bdu.fstec.ru/vul/2024-08724
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-32558
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/PBOZE2QZIBLFFTYWYN23FGKN6HULZ6HX
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/JQPELKG2LVTADSB7ME73AV4DXQK47PWK
osv	www.osv.dev/vulnerability/CVE-2023-32558
osv	www.osv.dev/vulnerability/openSUSE-SU-2024:13117-1
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-32558

16 Dec 2024 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 27.8

CVSS 3.19.8

EPSS0.00978

SSVC