Lucene search
+L

10 matches found

osv_ghsa
osv_ghsa
•added 2021/04/12 6:51 p.m.•46 views

GHSA-RJMF-P882-645M mongodb-client-encryption vulnerable to Improper Certificate Validation

A specific version of the Node.js mongodb-client-encryption module does not perform correct validation of the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result in interception of traffic between the Node.js driver and th...

6.8CVSS6.4AI score0.00202EPSS
SaveExploits0References5
Rows per page
Query Builder