Test ID:	1.3.6.1.4.1.25623.1.0.814519
Category:	Privilege escalation
Title:	Node.js 'debugger' Privilege Escalation Vulnerability - Windows
Summary:	Node.js is prone to a privilege escalation vulnerability.
Description:	Summary: Node.js is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw exists in due to an error in 'Debugger'. Debugger port 5858 listens on any interface by default, When the debugger is enabled with 'node --debug' or 'node debug'. Vulnerability Impact: Successful exploitation will allow remote attackers to conduct spoofing attacks. Affected Software/OS: Node.js versions prior to 6.15.0 on Windows. Solution: Upgrade to Node.js version 6.15.0 or later. Please see the references for more information. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-12120 BugTraq ID: 106040 http://www.securityfocus.com/bid/106040
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.