← Back

CVE-2020-8172

nvd nist
Published: Jun 8, 2020Modified: Jun 17, 2026

JSON object

Loading...
7.4
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Exploitability: 2.2 / Impact: 5.2
Source: NVD

Description

TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0.

Affected (12)

Nodejs
1 product
Node.js
Oracle
4 products
Banking Extensibility Workbench
Blockchain Platform
Graalvm
Mysql Cluster
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Nodejs
Node.js
From 12.0.0 to 12.18.0
Node.js
From 14.0.0 to 14.4.0
Configuration B
10 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Banking Extensibility Workbench
Version 14.3.0
Banking Extensibility Workbench
Version 14.4.0
Blockchain Platform
Before 21.1.2
Oracle
Graalvm
Version 19.3.2
Graalvm
Version 20.1.0
Oracle
Mysql Cluster
Up to 7.3.30
Mysql Cluster
From 7.4.0 to 7.4.29
Mysql Cluster
From 7.5.0 to 7.5.19
Mysql Cluster
From 7.6.0 to 7.6.15
Mysql Cluster
From 8.0.0 to 8.0.21

Related CWEs

CWE-295
Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.

References (18)

Source: support@hackerone.com
ExploitThird Party Advisory
Source: support@hackerone.com
Vendor Advisory
Source: support@hackerone.com
Third Party Advisory
Source: support@hackerone.com
Third Party Advisory
Source: support@hackerone.com
Not ApplicableThird Party Advisory
Source: support@hackerone.com
PatchThird Party Advisory
Source: support@hackerone.com
PatchThird Party Advisory
Source: support@hackerone.com
PatchThird Party Advisory
Source: support@hackerone.com
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Not ApplicableThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory

Timeline

No history available yet.