7.4
CVE-2020-8172
- EPSS 1.18%
- Veröffentlicht 08.06.2020 14:15:13
- Zuletzt bearbeitet 21.11.2024 05:38:26
- Quelle support@hackerone.com
- Teams Watchlist Login
- Unerledigt Login
TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Banking Extensibility Workbench Version14.3.0
Oracle ≫ Banking Extensibility Workbench Version14.4.0
Oracle ≫ Blockchain Platform Version < 21.1.2
Oracle ≫ Mysql Cluster Version <= 7.3.30
Oracle ≫ Mysql Cluster Version >= 7.4.0 <= 7.4.29
Oracle ≫ Mysql Cluster Version >= 7.5.0 <= 7.5.19
Oracle ≫ Mysql Cluster Version >= 7.6.0 <= 7.6.15
Oracle ≫ Mysql Cluster Version >= 8.0.0 <= 8.0.21
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.18% | 0.781 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.4 | 2.2 | 5.2 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
|
| nvd@nist.gov | 5.8 | 8.6 | 4.9 |
AV:N/AC:M/Au:N/C:P/I:P/A:N
|
CWE-295 Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.