vulnerability

Oracle Solaris 11: CVE-2021-22939 (11.4 SRU 38.101.6, 11.4 SRU 39.107.1)

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
2021-08-16
Added
2021-11-17
Modified
2022-02-17

Description

If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an expired certificate would have been accepted.

Solution(s)

oracle-solaris-11-4-upgrade-runtime-nodejs-14-17-6-11-4-38-0-1-101-2oracle-solaris-11-4-upgrade-runtime-nodejs-nodejs-12-12-22-5-11-4-38-0-1-101-2oracle-solaris-11-4-upgrade-runtime-nodejs-nodejs-14-14-17-6-11-4-38-0-1-101-2oracle-solaris-11-4-upgrade-runtime-nodejs-nodejs-16-16-11-1-11-4-39-0-1-107-2
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.