ROS-20240916-12

🗓️ 16 Sep 2024 00:00:00Reported by RedosType

Vulnerability in Node.js crypto.setEngine() method allows remote attackers to bypass security restriction

Reporter	Title	Published	Views	Family All 51
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Node.js	27 Sep 202321:08	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to permissions bypass, privilege escalation, key generation failure, denial of service and request smuggling due to vulnerabilities in Node.js	18 Aug 202308:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM SDK for Node.js and packaged modules affect IBM Business Automation Workflow Configuration Editor	26 Sep 202308:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Control is vulnerable to multiple weaknesses related to Node.js	29 Apr 202502:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities present in IBM Answer Retrieval for Watson Discovery versions 2.12 and earlier	8 Aug 202322:22	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js affects IBM Voice Gateway	31 Jan 202413:56	–	ibm
BDU FSTEC	The vulnerability of the crypto.setEngine() method in the Node.js software platform allows a hacker to circumvent existing security restrictions.	28 Aug 202300:00	–	bdu_fstec
Broadcom	Privilege escalation vulnerability in Node.js 20 could allow loading arbitrary OpenSSL engines when the experimental permission model is enabled (CVE-2023-30586).	19 Dec 202300:00	–	broadcom
Chainguard	CVE-2023-30586 vulnerabilities	1 Jul 202300:15	–	cgr
Circl	CVE-2023-30586	1 Jul 202307:15	–	circl