Published: 08/06/2020 Updated: 12/05/2022

CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 7.4 | Impact Score: 5.2 | Exploitability Score: 2.2

VMScore: 516

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N

TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0.

Vulnerable Product	Search on Vulmon	Subscribe to Product
nodejs node.js
oracle graalvm 19.3.2
oracle graalvm 20.1.0
oracle banking extensibility workbench 14.4.0
oracle banking extensibility workbench 14.3.0
oracle mysql cluster
oracle blockchain platform

Debian Bug report logs - #962145 nodejs: CVE-2020-11080 CVE-2020-8172 CVE-2020-8174 (June 2020 security release) Package: src:nodejs; Maintainer for src:nodejs is Debian Javascript Maintainers <pkg-javascript-devel@alioth-listsdebiannet>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 3 Jun 2020 1 ...

Synopsis Important: nodejs:12 security update Type/Severity Security Advisory: Important Topic An update for the nodejs:12 module is now available for Red Hat Enterprise Linux 81 Extended Update SupportRed Hat Product Security has rated this update as having a security impact of Important A Common Vulner ...

Synopsis Important: nodejs:12 security update Type/Severity Security Advisory: Important Topic An update for the nodejs:12 module is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CV ...

Synopsis Important: rh-nodejs12-nodejs security update Type/Severity Security Advisory: Important Topic An update for rh-nodejs12-nodejs is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring S ...

Critical Infrastructure Sectors: Energy

CWE-295 https://hackerone.com/reports/811502 https://nodejs.org/en/blog/vulnerability/june-2020-security-releases/https://security.netapp.com/advisory/ntap-20200625-0002/https://www.oracle.com/security-alerts/cpujul2020.html https://www.oracle.com/security-alerts/cpuoct2020.html https://security.gentoo.org/glsa/202101-07 https://www.oracle.com/security-alerts/cpujan2021.html https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpuapr2022.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=962145 https://nvd.nist.gov https://www.cisa.gov/uscert/ics/advisories/icsa-22-242-01

CVE-2020-8172

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

ICS Advisories

References

Vulmon Search

About

Products

Connect