CVE-2016-10558

The vulnerability CVE-2016-10558 affects the Aerospike Node.js addon. Versions below 2.4.2 download binary resources over HTTP, allowing a privileged network attacker to perform a MITM and swap the binary, potentially leading to remote code execution on the host running aerospike. The issue is tr...