CVE-2020-8172
TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0.
- Score
- CVSS 3.1 7.4 High
- Status
- Modified - support@hackerone.com
- Published
- 2020-06-08
- Last modified
- 2024-08-04
- Weaknesses
- CWE-295
Affected products
- Node.js (Nodejs)
- Banking Extensibility Workbench (Oracle)
- Blockchain Platform (Oracle)
- Graalvm (Oracle)
- Mysql Cluster (Oracle)
References
- https://hackerone.com/reports/811502
- https://nodejs.org/en/blog/vulnerability/june-2020-security-releases/
- https://security.gentoo.org/glsa/202101-07
- https://security.netapp.com/advisory/ntap-20200625-0002/
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://www.oracle.com/security-alerts/cpujan2021.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
