Node Sauce Connect Project

node-sauce-connect_project

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Node Sauce Connect

node-sauce-connect

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-10599 1Node Sauce Connect Project 1Node Sauce Connect Nov 21, 2024 Jun 1, 2018 N/A· v4 8.1 HIGH· v3 9.3 HIGH· v2 sauce-connect is a Node.js wrapper over the SauceLabs SauceConnect.jar program for establishing a secure tunnel for intranet testing. sauce-connect downloads binary resources over HTTP, which leaves it vulnerable to MITM...Show more sauce-connect is a Node.js wrapper over the SauceLabs SauceConnect.jar program for establishing a secure tunnel for intranet testing. sauce-connect downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2016-10599

1Node Sauce Connect Project

1Node Sauce Connect

Nov 21, 2024

Jun 1, 2018

N/A· v4

8.1 HIGH· v3

9.3 HIGH· v2

sauce-connect is a Node.js wrapper over the SauceLabs SauceConnect.jar program for establishing a secure tunnel for intranet testing. sauce-connect downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.Show less