Improper Access Control

🗓️ 23 Aug 2023 17:05:30Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 36 Views

Vulnerability in nodejs improper access control

Reporter	Title	Published	Views	Family All 207
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by a vulnerability in Node.js (CVE-2023-32006)	29 Nov 202322:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 9.0.1	16 Nov 202315:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to multiple Node.js vulnerabilities	31 Jan 202413:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Dashboards on Cloud Pak for Data 4.8.0 has addressed security vulnerabilities	29 Nov 202322:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM SDK for Node.js and packaged modules affect IBM Business Automation Workflow Configuration Editor	26 Sep 202308:26	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Pulse application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	5 Feb 202415:13	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.11 addresses multiple security vulnerabilities.	20 Dec 202316:10	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to bypassing security restrictions due to multiple Node.js vulnerabilities	14 Sep 202317:19	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js affect IBM Voice Gateway	2 Oct 202320:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities present in IBM Answer Retrieval for Watson Discovery versions 2.13 and earlier	12 Oct 202319:11	–	ibm

Vulners

Node

nodejs nodejsMatch18.16.1-r0os

AND

nodejs nodejsMatch18.16.0-r1os

AND

nodejs nodejsMatch18.17.0-r0os

AND

alpinelinux alpine_linuxMatch3.18

nodejs nodejsMatch18.14.1-r0os

AND

nodejs nodejsMatch18.16.0-r0os

AND

nodejs nodejsMatch12.17.0-r0os

AND

nodejs nodejsMatch14.17.6-r0os

AND

nodejs nodejsMatch18.15.0-r1os

AND

nodejs nodejsMatch18.17.0-r0os

AND

nodejs nodejsMatch16.13.1-r0os

AND

nodejs nodejsMatch18.16.0-r1os

AND

nodejs nodejsMatch16.13.2-r1os

AND

nodejs nodejsMatch12.16.2-r0os

AND

nodejs nodejsMatch18.16.1-r0os

AND

nodejs nodejsMatch14.17.4-r0os

AND

nodejs nodejsMatch18.12.1-r0os

AND

nodejs nodejsMatch14.17.3-r0os

AND

nodejs nodejsMatch14.16.1-r2os

AND

nodejs nodejsMatch14.18.1-r1os

AND

nodejs nodejsMatch16.14.2-r1os

AND

nodejs nodejsMatch18.15.0-r0os

AND

nodejs nodejsMatch16.15.0-r0os

AND

nodejs nodejsMatch16.13.2-r0os

AND

nodejs nodejsMatch14.17.0-r0os

AND

nodejs nodejsMatch16.14.2-r0os

AND

nodejs nodejsMatch12.15.0-r1os

AND

nodejs nodejsMatch18.14.2-r0os

AND

nodejs nodejsMatch16.16.0-r0os

AND

nodejs nodejsMatch16.17.1-r0os

AND

nodejs nodejsMatch16.16.0-r1os

AND

nodejs nodejsMatch14.17.1-r0os

AND

nodejs nodejsMatch16.13.1-r1os

AND

nodejs nodejsMatch16.15.0-r1os

AND

nodejs nodejsMatch14.18.0-r0os

AND

nodejs nodejsMatch14.17.2-r0os

AND

nodejs nodejsMatch16.18.0-r1os

AND

nodejs nodejsMatch18.13.0-r0os

AND

nodejs nodejsMatch14.17.5-r0os

AND

nodejs nodejsMatch14.16.0-r0os

AND

nodejs nodejsMatch16.17.0-r0os

AND

nodejs nodejsMatch18.14.0-r0os

AND

nodejs nodejsMatch14.17.6-r1os

AND

nodejs nodejsMatch14.16.0-r1os

AND

alpinelinux alpine_linuxMatchedge

nodejs nodejsMatch18.17.0-r0os

AND

nodejs nodejsMatch18.14.2-r0os

AND

nodejs nodejsMatch18.14.1-r0os

AND

nodejs nodejsMatch16.18.0-r1os

AND

nodejs nodejsMatch18.16.1-r0os

AND

nodejs nodejsMatch18.12.1-r0os

AND

nodejs nodejsMatch18.16.0-r0os

AND

alpinelinux alpine_linuxMatch3.17

nodejs nodejsMatch12.19.0~dfsg-1debian

AND

debian debian_linuxMatch999

nodejs nodejsMatch16.15.0-r0os

AND

nodejs nodejsMatch16.15.0-r1os

AND

nodejs nodejsMatch16.17.1-r0os

AND

nodejs nodejsMatch16.19.1-r0os

AND

nodejs nodejsMatch16.16.0-r0os

AND

nodejs nodejsMatch16.20.1-r0os

AND

nodejs nodejsMatch16.20.0-r0os

AND

nodejs nodejsMatch16.14.2-r1os

AND

alpinelinux alpine_linuxMatch3.16

nodejs nodejsMatch16.13.2-r0os

AND

nodejs nodejsMatch16.19.1-r0os

AND

nodejs nodejsMatch16.13.0-r0os

AND

nodejs nodejsMatch16.20.0-r0os

AND

nodejs nodejsMatch16.17.1-r0os

AND

nodejs nodejsMatch16.14.2-r0os

AND

nodejs nodejsMatch16.14.0-r0os

AND

nodejs nodejsMatch14.18.1-r1os

AND

nodejs nodejsMatch16.13.1-r0os

AND

nodejs nodejsMatch16.16.0-r0os

AND

nodejs nodejsMatch16.20.1-r0os

AND

alpinelinux alpine_linuxMatch3.15

Source	Link
secdb	www.secdb.alpinelinux.org/edge/main.yaml
secdb	www.secdb.alpinelinux.org/v3.17/main.yaml
secdb	www.secdb.alpinelinux.org/v3.18/main.yaml
hackerone	www.hackerone.com/reports/2043807
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/JQPELKG2LVTADSB7ME73AV4DXQK47PWK/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/PBOZE2QZIBLFFTYWYN23FGKN6HULZ6HX/
security	www.security.netapp.com/advisory/ntap-20230915-0009/

19 Sep 2023 05:32Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.18.8

EPSS0.00074

SSVC