Описание
TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| nodejs | not-affected | package |
Примечания
https://nodejs.org/en/blog/vulnerability/june-2020-security-releases/#tls-session-reuse-can-lead-to-host-certificate-verification-bypass-high-cve-2020-8172
EPSS
Связанные уязвимости
TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0.
TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0.
TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0.
TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0.
Уязвимость реализации протокола TLS программной платформы Node.js, позволяющая нарушителю реализовать атаку типа «человек посередине»
EPSS