← Back

CVE-2020-8172

nvd nist
Published: Jun 8, 2020Modified: Jun 17, 2026

JSON object

Loading...
7.4
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Exploitability: 2.2 / Impact: 5.2
Source: NVD

Description

TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0.

Affected (12)

Nodejs
1 product
Node.js
Oracle
4 products
Banking Extensibility Workbench
Blockchain Platform
Graalvm
Mysql Cluster
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Nodejs
Node.js
12.0.0 ≤ version < 12.18.0
Node.js
14.0.0 ≤ version < 14.4.0
Configuration B
10 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Banking Extensibility Workbench
Version 14.3.0
Banking Extensibility Workbench
Version 14.4.0
Blockchain Platform
version < 21.1.2
Oracle
Graalvm
Version 19.3.2
Graalvm
Version 20.1.0
Oracle
Mysql Cluster
version ≤ 7.3.30
Mysql Cluster
7.4.0 ≤ version ≤ 7.4.29
Mysql Cluster
7.5.0 ≤ version ≤ 7.5.19
Mysql Cluster
7.6.0 ≤ version ≤ 7.6.15
Mysql Cluster
8.0.0 ≤ version ≤ 8.0.21

Related CWEs

CWE-295
Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.

References (18)

Source: support@hackerone.com
ExploitThird Party Advisory
Source: support@hackerone.com
Vendor Advisory
Source: support@hackerone.com
Third Party Advisory
Source: support@hackerone.com
Third Party Advisory
Source: support@hackerone.com
Not ApplicableThird Party Advisory
Source: support@hackerone.com
PatchThird Party Advisory
Source: support@hackerone.com
PatchThird Party Advisory
Source: support@hackerone.com
PatchThird Party Advisory
Source: support@hackerone.com
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Not ApplicableThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory

Timeline

No history available yet.