Test Kennung:	1.3.6.1.4.1.25623.1.0.814521
Kategorie:	Privilege escalation
Titel:	Node.js 'HTTP Splitting' Privilege Escalation Vulnerability - Windows
Zusammenfassung:	Node.js is prone to a privilege escalation vulnerability.
Beschreibung:	Summary: Node.js is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw exists in due to an error in HTTP request splitting. If Node.js can be convinced to use unsanitized user-provided Unicode data for the 'path' option of an HTTP request, then data can be provided which will trigger a second, unexpected, and user-defined HTTP request to made to the same server. Vulnerability Impact: Successful exploitation will allow remote attackers to conduct spoofing attacks. Affected Software/OS: Node.js version 6.x prior to 6.15.0 and 8.x prior to 8.14.0 on Windows. Solution: Update to version 6.15.0, 8.14.0 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2018-12116 https://security.gentoo.org/glsa/202003-48 RedHat Security Advisories: RHSA-2019:1821 https://access.redhat.com/errata/RHSA-2019:1821
Copyright	Copyright (C) 2018 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.