Man-in-the-Middle (MitM)

🗓️ 24 Sep 2018 07:23:39Reported by Veracode Vulnerability DatabaseType

node.js vulnerability to Man-in-the-Middle attack due to improper handling of wildcard in X.509 Certificate name field

Reporter	Title	Published	Views	Family All 78
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities may affect IBM® SDK for Node.js™	9 Aug 201804:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities may affect IBM® SDK for Node.js™ in IBM Bluemix	9 Aug 201804:20	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in IBM SDK for Node.js might affect IBM Business Process Manager (BPM) Configuration Editor	15 Jun 201807:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Node.js affects IBM API Connect (CVE-2016-7099, CVE-2016-5325)	15 Jun 201807:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple OpenSSL and Non-OpenSSL vulnerabilities in Node.js affect IBM Rational Application Developer for WebSphere Software included in Rational Developer for i and Rational Developer for AIX and Linux	3 Aug 201804:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple OpenSSL and Non-OpenSSL vulnerabilities in Node.js included in Rational Application Developer for WebSphere Software	5 Feb 202000:09	–	ibm
CNVD	Node.js Security Bypass Vulnerability	29 Sep 201600:00	–	cnvd
CVE	CVE-2016-7099	10 Oct 201616:00	–	cve
Cvelist	CVE-2016-7099	10 Oct 201616:00	–	cvelist
Debian CVE	CVE-2016-7099	10 Oct 201616:00	–	debiancve

Vulners

Node

node nodeRange0.10.0–0.10.46js

node nodeRange0.11.0–0.12.15js

node nodeRange4.0.0–4.5.0js

node nodeRange5.0.0–6.6.0js

nodejs node.jsRange4.0.0–4.2.3js

nodejs node.jsRange0.10.21–0.10.36js

nodejs node.jsRange5.0.0–5.3.0js

Source	Link
github	www.github.com/nodejs/node/commit/743f0c916469f3129dfae406fa104dc46782e20b
nodejs	www.nodejs.org/en/blog/vulnerability/september-2016-security-releases/

15 May 2019 06:18Current

5.9Medium risk

Vulners AI Score5.9

CVSS 24.3

CVSS 35.9

EPSS0.00718