Improper Certificate Validation

🗓️ 12 Jan 2022 19:19:21Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 26 Views

Improper Certificate Validation in Nodejs Softwar

Reporter	Title	Published	Views	Family All 395
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in node.js	14 Apr 202215:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	25 Oct 202214:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway affected by vulnerability in Node (CVE-2021-44531)	29 Jul 202218:37	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of NodeJS, IBM Cloud Pak for Multicloud Management Monitoring is vulnerable to multiple security vulnerabilities.	5 Sep 202311:07	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple CVEs in Node.js	8 Apr 202214:56	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in PostgreSQL, Node.js, and Data Tables from Spry Media may affect IBM Spectrum Protect Plus	31 Jan 202218:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	15 Jul 202516:38	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilites that affect IBM Engineering Requirements Quality Assistant On-Premises (CVE-2021-4104, CVE-2021-29469, CVE-2021-44531, CVE-2021-44531, CVE-2022-21824, CVE-2021-29899, CVE-2021-27290 )	17 Mar 202215:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to bypassing of security restrictions due to CVE-2021-44531	4 Nov 202216:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance is vulnerable to multiple security issues due to Node.js	22 Aug 202215:20	–	ibm

Vulners

Node

nodejs nodejsMatch14.18.1-r1os

AND

nodejs nodejsMatch14.16.1-r2os

AND

nodejs nodejsMatch14.17.2-r0os

AND

nodejs nodejsMatch14.17.6-r1os

AND

nodejs nodejsMatch14.17.4-r0os

AND

nodejs nodejsMatch12.16.2-r0os

AND

nodejs nodejsMatch12.17.0-r0os

AND

nodejs nodejsMatch12.15.0-r1os

AND

nodejs nodejsMatch16.13.1-r1os

AND

nodejs nodejsMatch16.13.1-r0os

AND

nodejs nodejsMatch14.18.0-r0os

AND

nodejs nodejsMatch14.17.3-r0os

AND

nodejs nodejsMatch14.17.6-r0os

AND

nodejs nodejsMatch14.17.5-r0os

AND

nodejs nodejsMatch14.17.1-r0os

AND

nodejs nodejsMatch14.16.0-r1os

AND

nodejs nodejsMatch14.17.0-r0os

AND

nodejs nodejsMatch14.16.0-r0os

AND

alpinelinux alpine_linuxMatchedge

nodejs nodejsMatch14.18.1-r1os

AND

nodejs nodejsMatch16.13.1-r0os

AND

nodejs nodejsMatch16.13.0-r0os

AND

alpinelinux alpine_linuxMatch3.15

nodejs-current nodejs-currentMatch15.12.0-r0os

AND

nodejs-current nodejs-currentMatch16.5.0-r0os

AND

nodejs-current nodejs-currentMatch13.12.0-r0os

AND

nodejs-current nodejs-currentMatch13.11.0-r0os

AND

nodejs-current nodejs-currentMatch17.0.1-r0os

AND

nodejs-current nodejs-currentMatch13.13.0-r0os

AND

nodejs-current nodejs-currentMatch16.11.1-r1os

AND

nodejs-current nodejs-currentMatch15.11.0-r0os

AND

nodejs-current nodejs-currentMatch14.1.0-r0os

AND

nodejs-current nodejs-currentMatch16.9.1-r0os

AND

nodejs-current nodejs-currentMatch17.3.0-r0os

AND

nodejs-current nodejs-currentMatch16.6.1-r0os

AND

nodejs-current nodejs-currentMatch16.6.2-r0os

AND

nodejs-current nodejs-currentMatch16.4.0-r0os

AND

nodejs-current nodejs-currentMatch16.1.0-r0os

AND

nodejs-current nodejs-currentMatch16.10.0-r0os

AND

nodejs-current nodejs-currentMatch16.8.0-r0os

AND

nodejs-current nodejs-currentMatch14.2.0-r0os

AND

nodejs-current nodejs-currentMatch15.14.0-r0os

AND

nodejs-current nodejs-currentMatch16.2.0-r0os

AND

nodejs-current nodejs-currentMatch14.3.0-r0os

AND

nodejs-current nodejs-currentMatch16.7.0-r0os

AND

nodejs-current nodejs-currentMatch16.0.0-r0os

AND

nodejs-current nodejs-currentMatch16.4.2-r0os

AND

nodejs-current nodejs-currentMatch14.0.0-r0os

AND

nodejs-current nodejs-currentMatch17.2.0-r0os

AND

nodejs-current nodejs-currentMatch13.12.0-r1os

AND

nodejs-current nodejs-currentMatch15.13.0-r0os

AND

nodejs-current nodejs-currentMatch13.1.0-r0os

AND

nodejs-current nodejs-currentMatch16.3.0-r0os

AND

alpinelinux alpine_linuxMatchedge

nodejs-current nodejs-currentMatch17.2.0-r0os

AND

nodejs-current nodejs-currentMatch17.0.1-r0os

AND

nodejs-current nodejs-currentMatch17.1.0-r0os

AND

alpinelinux alpine_linuxMatch3.15

nodejs nodejsMatch12.16.3-r0os

AND

nodejs nodejsMatch12.22.1-r0os

AND

nodejs nodejsMatch12.22.2-r0os

AND

nodejs nodejsMatch12.17.0-r0os

AND

nodejs nodejsMatch12.22.4-r0os

AND

nodejs nodejsMatch12.22.6-r0os

AND

nodejs nodejsMatch12.22.5-r0os

AND

nodejs nodejsMatch12.21.0-r0os

AND

alpinelinux alpine_linuxMatch3.12

nodejs nodejsMatch14.17.6-r0os

AND

nodejs nodejsMatch14.18.1-r0os

AND

nodejs nodejsMatch14.17.4-r0os

AND

nodejs nodejsMatch14.17.3-r0os

AND

nodejs nodejsMatch14.17.1-r0os

AND

nodejs nodejsMatch14.17.0-r0os

AND

nodejs nodejsMatch14.17.5-r0os

AND

alpinelinux alpine_linuxMatch3.14

nodejs nodejsMatch14.16.0-r0os

AND

nodejs nodejsMatch14.18.1-r0os

AND

nodejs nodejsMatch14.16.1-r1os

AND

nodejs nodejsMatch14.17.4-r0os

AND

nodejs nodejsMatch14.17.5-r0os

AND

nodejs nodejsMatch14.17.3-r0os

AND

nodejs nodejsMatch14.17.6-r0os

AND

alpinelinux alpine_linuxMatch3.13

nodejs nodejsMatch12.19.0~dfsg-1debian

AND

debian debian_linuxMatch999

openjdk11 openjdk11Match11.0.6_p10-r1os

AND

openjdk11 openjdk11Match11.0.6_p10-r0os

AND

openjdk11 openjdk11Match11.0.14_p9-r0os

AND

openjdk11 openjdk11Match11.0.10_p9-r0os

AND

openjdk11 openjdk11Match11.0.7_p10-r1os

AND

openjdk11 openjdk11Match11.0.11_p9-r0os

AND

openjdk11 openjdk11Match11.0.12_p7-r0os

AND

openjdk11 openjdk11Match11.0.13_p8-r0os

AND

openjdk11 openjdk11Match11.0.10_p9-r1os

AND

alpinelinux alpine_linuxMatchedge

openjdk11 openjdk11Match11.0.14_p9-r0os

AND

openjdk11 openjdk11Match11.0.13_p8-r0os

AND

alpinelinux alpine_linuxMatch3.15

nodejs nodejsMatch12.19.0~dfsg-1debian

AND

debian debian_linuxMatch11

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.17.2_1.el7

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.15.4_2.el7

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.20.0_2.el7

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.18.2_1.el7

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.17.5_1.el7

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.16.0_1.el7

rh-nodejs12-nodejs rh-nodejs12-nodejsMatch12.19.1_2.el7

rh-nodejs12-nodejs rh-nodejs12-nodejsMatch12.10.0_3.el7

rh-nodejs12-nodejs rh-nodejs12-nodejsMatch12.14.1_1.el7

rh-nodejs12-nodejs rh-nodejs12-nodejsMatch12.16.1_1.el7

rh-nodejs12-nodejs rh-nodejs12-nodejsMatch12.21.0_1.el7

rh-nodejs12-nodejs rh-nodejs12-nodejsMatch12.22.2_1.el7

rh-nodejs12-nodejs rh-nodejs12-nodejsMatch12.10.0_4.el7

rh-nodejs12-nodejs rh-nodejs12-nodejsMatch12.18.2_1.el7

rh-nodejs12-nodejs rh-nodejs12-nodejsMatch12.22.5_1.el7

Source	Link
secdb	www.secdb.alpinelinux.org/edge/main.yaml
secdb	www.secdb.alpinelinux.org/v3.15/main.yaml
secdb	www.secdb.alpinelinux.org/edge/community.yaml
debian	www.debian.org/security/2022/dsa-5170
hackerone	www.hackerone.com/reports/1429694
nodejs	www.nodejs.org/en/blog/vulnerability/jan-2022-security-releases/
security	www.security.netapp.com/advisory/ntap-20220325-0007/
oracle	www.oracle.com/security-alerts/cpuapr2022.html
oracle	www.oracle.com/security-alerts/cpujul2022.html

05 Oct 2022 14:47Current

2.1Low risk

Vulners AI Score2.1

CVSS 25.8

CVSS 3.17.4

EPSS0.00076