ID de Prueba:	1.3.6.1.4.1.25623.1.0.814521
Categoría:	Privilege escalation
Título:	Node.js 'HTTP Splitting' Privilege Escalation Vulnerability - Windows
Resumen:	Node.js is prone to a privilege escalation vulnerability.
Descripción:	Summary: Node.js is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw exists in due to an error in HTTP request splitting. If Node.js can be convinced to use unsanitized user-provided Unicode data for the 'path' option of an HTTP request, then data can be provided which will trigger a second, unexpected, and user-defined HTTP request to made to the same server. Vulnerability Impact: Successful exploitation will allow remote attackers to conduct spoofing attacks. Affected Software/OS: Node.js version 6.x prior to 6.15.0 and 8.x prior to 8.14.0 on Windows. Solution: Update to version 6.15.0, 8.14.0 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2018-12116 https://security.gentoo.org/glsa/202003-48 RedHat Security Advisories: RHSA-2019:1821 https://access.redhat.com/errata/RHSA-2019:1821
Copyright	Copyright (C) 2018 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.