Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to node-request-retry CVE-2022-0654

Summary Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to node-request-retry CVE-2022-0654 with details below Vulnerability Details CVEID: CVE-2022-0654 DESCRIPTION: node-request-retry could allow a remote attacker to obtain sensitive information, caused ...

CVE-2022-0654

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository fgribreau/node-request-retry prior to 7.0.0...

CVE-2022-0654

CVE-2022-0654 affects node-request-retry in fgribreau/node-request-retry prior to 7.0.0. The vulnerability exposes sensitive information (cookies/credentials) to an unauthorized actor by leaking data to external sites during redirect-based requests, enabling potential credential abuse. Public ref...