CVE-2016-1000014

...

CVE-2016-1000014

CVE-2016-1000014 is a duplicate of CVE-2016-3956; the CVE entry has been superseded and should reference CVE-2016-3956 instead. The connected documents describe the actual vulnerability as an HTTP Bearer Token leakage in npm, enabling a remote attacker to obtain tokens and impersonate users. IBM ...