1 matches found
nodejs: HTTPS Agent TLS session reuse skips hostname verification
A flaw was found in Node.js. An incomplete fix for a previous vulnerability allows the HTTPS Agent to reuse Transport Layer Security TLS sessions, bypassing hostname verification across different identity policies. This could enable an attacker to impersonate a legitimate server, leading to...
6.3CVSS6.8AI score0.00272EPSS
SaveExploits0References5
20