EUVD-2019-0248

Malware in sbrugna...

GHSA-735C-R4VC-6GM9 Downloads Resources over HTTP in bionode-sra

Affected versions of bionode-sra insecurely downloads resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. While the exact severity of impact for a vulnerability like this is highly variable and depends on the...

bio (>=0.0.2 <=0.0.5), bionode (>=0.7.0 <=2.0.0) +1 more potentially affected by CVE-2016-10613 via bionode-sra (>=0.2.5 <=1.0.3)

bionode-sra NPM version =0.2.5, =0.0.2, =0.7.0, =3.3.5, =3.4.5 Source cves: CVE-2016-10613 Source advisory: OSV:GHSA-735C-R4VC-6GM9...

Downloads Resources over HTTP in bionode-sra

Affected versions of bionode-sra insecurely downloads resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. While the exact severity of impact for a vulnerability like this is highly variable and depends on the...

Man-in-the-Middle (MitM)

bionode-sra is vulnerable to man-in-the-middle MitM attack. This is possible because it does not prevent downloading of executables via HTTP if the attacker is on the network or positioned in between the user and the remote server. Consequently, it may potentially cause remote code execution RCE ...

CVE-2016-10613

bionode-sra is a Node.js wrapper for SRA Toolkit. bionode-sra downloads data resources over HTTP, which leaves it vulnerable to MITM attacks...

CVE-2016-10613

bionode-sra is a Node.js wrapper for SRA Toolkit. bionode-sra downloads data resources over HTTP, which leaves it vulnerable to MITM attacks...

CVE-2016-10613

Summary (CVE-2016-10613) : The bionode-sra Node.js wrapper for the SRA Toolkit downloads data over HTTP, creating susceptibility to man-in-the-middle (MitM) attacks when an attacker can position themselves on the network. The issue arises from not preventing HTTP downloads of resources (including...

CVE-2016-10613

bionode-sra is a Node.js wrapper for SRA Toolkit. bionode-sra downloads data resources over HTTP, which leaves it vulnerable to MITM attacks...

Downloads Resources over HTTP

Overview Affected versions of bionode-sra insecurely downloads resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. While the exact severity of impact for a vulnerability like this is highly variable and depends on...