CVE-2016-10577
CVE-2016-10577
Vexday Risk Score
3Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS —EPSS 1.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
29 mai 2018Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
ibm_db is an asynchronous/synchronous interface for node.js to IBM DB2 and IBM Informix. ibm_db before 1.0.2 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
Produtos afetados
HackerOne · ibm_db node moduleQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →