ID de Prueba:	1.3.6.1.4.1.25623.1.0.814522
Categoría:	Privilege escalation
Título:	Node.js 'HTTP Splitting' Privilege Escalation Vulnerability - Mac OS X
Resumen:	Node.js is prone to a privilege escalation vulnerability.
Descripción:	Summary: Node.js is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw exists in due to an error in HTTP request splitting. If Node.js can be convinced to use unsanitized user-provided Unicode data for the `path` option of an HTTP request, then data can be provided which will trigger a second, unexpected, and user-defined HTTP request to made to the same server. Vulnerability Impact: Successful exploitation will allow remote attackers to conduct spoofing attacks. Affected Software/OS: Node.js all versions prior to 6.15.0 and 8.14.0 on Mac OS X. Solution: Upgrade to Node.js version 6.15.0, 8.14.0 or later. Please see the references for more information. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2018-12116 https://security.gentoo.org/glsa/202003-48 RedHat Security Advisories: RHSA-2019:1821 https://access.redhat.com/errata/RHSA-2019:1821
Copyright	Copyright (C) 2018 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.