CVE-2016-10620

EPSS 0.74%
Veröffentlicht 01.06.2018 18:29:01
Zuletzt bearbeitet 21.11.2024 02:44:23
Quelle support@hackerone.com
CVE-Watchlists
Login
Unerledigt
Login

atom-node-module-installer installs node modules for atom-shell applications. atom-node-module-installer binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Atom-node-module-installer Project ≫ Atom-node-module-installer SwPlatformnode.js Version <= 0.9.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.74%	0.721

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	8.1	2.2	5.9	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-311 Missing Encryption of Sensitive Data

The product does not encrypt sensitive or critical information before storage or transmission.

https://nodesecurity.io/advisories/216

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2016-10620

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-10620

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-10620

EUVD