Описание
TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | not-affected | 18.13.0+dfsg1-1ubuntu2 |
| eoan | ignored | end of life |
| esm-apps/bionic | not-affected | code not present |
| esm-apps/focal | not-affected | code not present |
| esm-apps/jammy | not-affected | 12.22.9~dfsg-1ubuntu3 |
| esm-apps/xenial | not-affected | code not present |
| esm-infra-legacy/trusty | not-affected | code not present |
| focal | not-affected | code not present |
| groovy | ignored | end of life |
Показывать по
Ссылки на источники
EPSS
5.8 Medium
CVSS2
7.4 High
CVSS3
Связанные уязвимости
TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0.
TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0.
TLS session reuse can lead to host certificate verification bypass in ...
TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0.
Уязвимость реализации протокола TLS программной платформы Node.js, позволяющая нарушителю реализовать атаку типа «человек посередине»
EPSS
5.8 Medium
CVSS2
7.4 High
CVSS3