Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to node-request-retry CVE-2022-0654

Summary Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to node-request-retry CVE-2022-0654 with details below Vulnerability Details CVEID: CVE-2022-0654 DESCRIPTION: node-request-retry could allow a remote attacker to obtain sensitive information, caused ...

CVE-2022-0654

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository fgribreau/node-request-retry prior to 7.0.0...

CVE-2022-0654

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository fgribreau/node-request-retry prior to 7.0.0...

CVE-2022-0654: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository fgribreau/node-request-retry prior to 7.0.0...

node-request-retry 信息泄露漏洞

node-request-retry is a method of automatically retrying a request when a connection fails with an ECONNRESET, ENOTFOUND, ESOCKETTIMEDOUT, ETIMEDOUT, ECONNREFUSED, EHOSTUNREACH, one of EPIPE, EAIAGAIN, or when an HTTP 5xx or 429 errors, the request will be automatically retried, as these are...

PT-2022-13333

Name of the Vulnerable Software and Affected Versions fgribreau/node-request-retry versions prior to 7.0.0 Description The issue concerns the exposure of sensitive information to unauthorized actors. This occurs in the fgribreau/node-request-retry GitHub repository, where cookies are leaked to...