POJIA破甲
地图 / Node 18 reads openssl.cnf from /home/iojs/build/... upon startup on MacOS

Node 18 reads openssl.cnf from /home/iojs/build/... upon startup on MacOS

密码学缺陷 / 密码学问题(通用) / #1695596

厂商
Node.js
严重程度
低危 · CVSS 6.6
赏金
—
弱点
密码学问题(通用)
研究员
@mhdawson
披露日期
2022-10-26
资产
https://github.com/nodejs/node
CVE
CVE-2022-32222

该报告还没有中文解读。

原文摘录

摘自原文(3787 字符中的一小部分)
> NOTE! Thanks for submitting a report! Please replace *all* the [square] sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to triage and respond quickly, so be sure to take your time filling out the report!

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Node.js 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @mhdawson · 版权归作者与 Node.js 所有

同类报告

elections.k8s.io uses weak session secret key, may place elections at riskKubernetes · 2025-09-19 · $250SMTP interaction theft via MITMPortSwigger Web Security · 2020-11-04Able to change password by entering wrong old passwordStripo Inc · 2019-12-18HashDoS in V8Node.js · 2025-07-15The POODLE attack (SSLv3 supported) at status.slack.comSlack · 2018-11-28SSL certificate not validated when registering with a providerNextcloud · 2021-06-02 · $300