CVE-2016-10613

bionode-sra is a Node.js wrapper for SRA Toolkit. bionode-sra downloads data resources over HTTP, which leaves it vulnerable to MITM attacks...

CVE-2016-10613

Summary (CVE-2016-10613) : The bionode-sra Node.js wrapper for the SRA Toolkit downloads data over HTTP, creating susceptibility to man-in-the-middle (MitM) attacks when an attacker can position themselves on the network. The issue arises from not preventing HTTP downloads of resources (including...