Improper Access Control

🗓️ 18 Feb 2023 04:53:51Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 47 Views

nodejs vulnerable to Improper Access Control via `ICU_DATA

Reporter	Title	Published	Views	Family All 230
ALT Linux	Security fix for the ALT Linux 10 package node version 16.19.1-alt1	22 Mar 202300:00	–	altlinux
IBM Security Bulletins	Security Bulletin: IBM Cognos Controller is affected by vulnerabilities	15 Apr 202503:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® Graph	24 Apr 202322:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM SDK for Node.js and packaged modules affect IBM Business Automation Workflow Configuration Editor	1 Mar 202309:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilities in Node.js (CVE-2022-43548, CVE-2020-7676, CVE-2021-42550, CVE-2021-38561, CVE-2022-32149)	22 Jun 202320:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Node.js	28 Jun 202320:58	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for May 2023	26 Jun 202316:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Dashboards on Cloud Pak for Data has addressed security vulnerabilities	20 Oct 202317:07	–	ibm
IBM Security Bulletins	Security Bulletin: Potential security bypass in IBM DataPower Gateway (CVE_2023-23920)	2 May 202318:20	–	ibm

Vulners

Node

nodejs nodejsMatch14.17.6-r1os

AND

nodejs nodejsMatch16.13.1-r1os

AND

nodejs nodejsMatch14.17.5-r0os

AND

nodejs nodejsMatch16.17.1-r0os

AND

nodejs nodejsMatch16.13.1-r0os

AND

nodejs nodejsMatch14.18.0-r0os

AND

nodejs nodejsMatch14.16.0-r0os

AND

nodejs nodejsMatch14.17.2-r0os

AND

nodejs nodejsMatch14.17.1-r0os

AND

nodejs nodejsMatch18.14.0-r0os

AND

nodejs nodejsMatch14.18.1-r1os

AND

nodejs nodejsMatch16.15.0-r0os

AND

nodejs nodejsMatch14.17.4-r0os

AND

nodejs nodejsMatch14.17.6-r0os

AND

nodejs nodejsMatch16.17.0-r0os

AND

nodejs nodejsMatch16.13.2-r0os

AND

nodejs nodejsMatch12.15.0-r1os

AND

nodejs nodejsMatch16.14.2-r1os

AND

nodejs nodejsMatch12.17.0-r0os

AND

nodejs nodejsMatch18.12.1-r0os

AND

nodejs nodejsMatch16.16.0-r0os

AND

nodejs nodejsMatch18.13.0-r0os

AND

nodejs nodejsMatch16.14.2-r0os

AND

nodejs nodejsMatch16.16.0-r1os

AND

nodejs nodejsMatch14.17.0-r0os

AND

nodejs nodejsMatch16.13.2-r1os

AND

nodejs nodejsMatch16.18.0-r1os

AND

nodejs nodejsMatch16.15.0-r1os

AND

nodejs nodejsMatch12.16.2-r0os

AND

nodejs nodejsMatch14.16.0-r1os

AND

nodejs nodejsMatch14.17.3-r0os

AND

nodejs nodejsMatch14.16.1-r2os

AND

alpinelinux alpine_linuxMatchedge

nodejs nodejsMatch16.16.0-r0os

AND

nodejs nodejsMatch16.14.2-r1os

AND

nodejs nodejsMatch16.17.1-r0os

AND

nodejs nodejsMatch16.15.0-r1os

AND

nodejs nodejsMatch16.15.0-r0os

AND

alpinelinux alpine_linuxMatch3.16

nodejs nodejsMatch16.14.2-r0os

AND

nodejs nodejsMatch16.13.0-r0os

AND

nodejs nodejsMatch16.13.2-r0os

AND

nodejs nodejsMatch14.18.1-r1os

AND

nodejs nodejsMatch16.13.1-r0os

AND

nodejs nodejsMatch16.14.0-r0os

AND

nodejs nodejsMatch16.16.0-r0os

AND

nodejs nodejsMatch16.17.1-r0os

AND

alpinelinux alpine_linuxMatch3.15

nodejs nodejsMatch14.18.1-r0os

AND

nodejs nodejsMatch14.17.3-r0os

AND

nodejs nodejsMatch14.20.0-r0os

AND

nodejs nodejsMatch14.17.6-r0os

AND

nodejs nodejsMatch14.20.1-r0os

AND

nodejs nodejsMatch14.17.4-r0os

AND

nodejs nodejsMatch14.17.0-r0os

AND

nodejs nodejsMatch14.17.1-r0os

AND

nodejs nodejsMatch14.17.5-r0os

AND

nodejs nodejsMatch14.19.0-r0os

AND

alpinelinux alpine_linuxMatch3.14

nodejs nodejsMatch18.12.1-r0os

AND

nodejs nodejsMatch16.18.0-r1os

AND

alpinelinux alpine_linuxMatch3.17

nodejs nodejsMatch10.24.0~dfsg-1~deb10u1debian

AND

nodejs nodejsMatch10.21.0~dfsg-1~deb10u1debian

AND

debian debian_linuxMatch10

nodejs nodejsMatch12.19.0~dfsg-1debian

AND

debian debian_linuxMatch11

nodejs nodejsMatch12.19.0~dfsg-1debian

AND

debian debian_linuxMatch999

rh-nodejs14 rh-nodejs14Match3.6_1.el7

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.18.2_1.el7

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.16.0_1.el7

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.20.1_2.el7

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.20.0_2.el7

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.15.4_2.el7

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.17.2_1.el7

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.17.5_1.el7

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2023/02/msg00038.html
secdb	www.secdb.alpinelinux.org/v3.14/main.yaml
secdb	www.secdb.alpinelinux.org/v3.17/main.yaml
secdb	www.secdb.alpinelinux.org/edge/main.yaml
secdb	www.secdb.alpinelinux.org/v3.16/main.yaml
secdb	www.secdb.alpinelinux.org/v3.15/main.yaml
debian	www.debian.org/security/2023/dsa-5395
nodejs	www.nodejs.org/en/blog/vulnerability/february-2023-security-releases/
security	www.security.netapp.com/advisory/ntap-20230316-0008/

17 Mar 2025 21:26Current

6Medium risk

Vulners AI Score6

CVSS 3.14.2

EPSS0.00082

SSVC