Уязвимость CVE-2020-8172: Информация

Описание

TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0.

Важность: HIGH (7,4) Вектор: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Исправленные пакеты

Ссылки на рекомендации, решения и инструменты

1. Подверженные конфигурации:

   1. Конфигурация 1

      cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*

      Start including

      12.0.0

      End excliding

      12.18.0

      ---

      cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*

      Start including

      14.0.0

      End excliding

      14.4.0

      ---

      Конфигурация 2

      cpe:2.3:a:oracle:graalvm:19.3.2:*:*:*:enterprise:*:*:*

      ---

      cpe:2.3:a:oracle:graalvm:20.1.0:*:*:*:enterprise:*:*:*

      ---

      cpe:2.3:a:oracle:banking_extensibility_workbench:14.4.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:oracle:banking_extensibility_workbench:14.3.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*

      Start including

      8.0.0

      End including

      8.0.21

      ---

      cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*

      Start including

      7.6.0

      End including

      7.6.15

      ---

      cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*

      Start including

      7.5.0

      End including

      7.5.19

      ---

      cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*

      Start including

      7.4.0

      End including

      7.4.29

      ---

      cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*

      End including

      7.3.30

      ---

      cpe:2.3:a:oracle:blockchain_platform:*:*:*:*:*:*:*:*

      End excliding

      21.1.2

      ---