2020-02-07 15:01:12 +00:00
{
2025-04-30 23:00:39 +00:00
"data_version" : "4.0" ,
2020-04-16 19:02:24 +00:00
"data_type" : "CVE" ,
"data_format" : "MITRE" ,
"CVE_data_meta" : {
"ID" : "CVE-2019-15606" ,
"ASSIGNER" : "support@hackerone.com" ,
"STATE" : "PUBLIC"
2020-02-07 15:01:12 +00:00
} ,
2025-04-30 23:00:39 +00:00
"description" : {
"description_data" : [
{
"lang" : "eng" ,
"value" : "Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons"
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "Improper Input Validation (CWE-20)" ,
"cweId" : "CWE-20"
}
]
}
]
} ,
2020-04-16 19:02:24 +00:00
"affects" : {
"vendor" : {
"vendor_data" : [
2020-02-07 15:01:12 +00:00
{
2025-04-30 23:00:39 +00:00
"vendor_name" : "NodeJS" ,
2020-04-16 19:02:24 +00:00
"product" : {
"product_data" : [
2020-02-07 15:01:12 +00:00
{
2025-04-30 23:00:39 +00:00
"product_name" : "Node" ,
2020-04-16 19:02:24 +00:00
"version" : {
"version_data" : [
2020-02-07 15:01:12 +00:00
{
2025-04-30 23:00:39 +00:00
"version_affected" : "<" ,
"version_name" : "4.0" ,
"version_value" : "4.*"
} ,
{
"version_affected" : "<" ,
"version_name" : "5.0" ,
"version_value" : "5.*"
} ,
{
"version_affected" : "<" ,
"version_name" : "6.0" ,
"version_value" : "6.*"
} ,
{
"version_affected" : "<" ,
"version_name" : "7.0" ,
"version_value" : "7.*"
} ,
{
"version_affected" : "<" ,
"version_name" : "8.0" ,
"version_value" : "8.*"
} ,
{
"version_affected" : "<" ,
"version_name" : "9.0" ,
"version_value" : "9.*"
} ,
{
"version_affected" : "<" ,
"version_name" : "10.0" ,
"version_value" : "10.19.0"
} ,
{
"version_affected" : "<" ,
"version_name" : "11.0" ,
"version_value" : "11.*"
} ,
{
"version_affected" : "<" ,
"version_name" : "12.0" ,
"version_value" : "12.15.0"
} ,
{
"version_affected" : "<" ,
"version_name" : "13.0" ,
"version_value" : "13.8.0"
2020-02-07 15:01:12 +00:00
}
]
}
}
]
}
}
]
}
} ,
2020-04-16 19:02:24 +00:00
"references" : {
"reference_data" : [
2020-02-24 17:01:08 +00:00
{
2025-04-30 23:00:39 +00:00
"url" : "https://access.redhat.com/errata/RHSA-2020:0573" ,
"refsource" : "MISC" ,
"name" : "https://access.redhat.com/errata/RHSA-2020:0573"
2020-02-25 11:01:07 +00:00
} ,
{
2025-04-30 23:00:39 +00:00
"url" : "https://access.redhat.com/errata/RHSA-2020:0579" ,
"refsource" : "MISC" ,
"name" : "https://access.redhat.com/errata/RHSA-2020:0579"
2020-02-25 17:01:15 +00:00
} ,
{
2025-04-30 23:00:39 +00:00
"url" : "https://access.redhat.com/errata/RHSA-2020:0597" ,
"refsource" : "MISC" ,
"name" : "https://access.redhat.com/errata/RHSA-2020:0597"
2020-02-25 17:01:15 +00:00
} ,
{
2025-04-30 23:00:39 +00:00
"url" : "https://access.redhat.com/errata/RHSA-2020:0598" ,
"refsource" : "MISC" ,
"name" : "https://access.redhat.com/errata/RHSA-2020:0598"
2020-02-25 19:01:09 +00:00
} ,
{
2025-04-30 23:00:39 +00:00
"url" : "https://access.redhat.com/errata/RHSA-2020:0602" ,
"refsource" : "MISC" ,
"name" : "https://access.redhat.com/errata/RHSA-2020:0602"
2020-03-04 01:01:10 +00:00
} ,
{
2025-04-30 23:00:39 +00:00
"url" : "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00008.html" ,
"refsource" : "MISC" ,
"name" : "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00008.html"
2020-03-20 21:01:14 +00:00
} ,
{
2025-04-30 23:00:39 +00:00
"url" : "https://security.gentoo.org/glsa/202003-48" ,
"refsource" : "MISC" ,
"name" : "https://security.gentoo.org/glsa/202003-48"
2020-04-14 14:04:09 -07:00
} ,
2021-07-21 15:02:04 +00:00
{
2025-04-30 23:00:39 +00:00
"url" : "https://www.debian.org/security/2020/dsa-4669" ,
"refsource" : "MISC" ,
"name" : "https://www.debian.org/security/2020/dsa-4669"
2021-07-21 15:02:04 +00:00
} ,
2020-04-14 14:04:09 -07:00
{
2020-04-16 19:02:24 +00:00
"url" : "https://www.oracle.com/security-alerts/cpuapr2020.html" ,
"refsource" : "MISC" ,
"name" : "https://www.oracle.com/security-alerts/cpuapr2020.html"
2020-04-30 13:01:13 +00:00
} ,
{
2021-07-21 15:02:04 +00:00
"url" : "https://www.oracle.com//security-alerts/cpujul2021.html" ,
"refsource" : "MISC" ,
"name" : "https://www.oracle.com//security-alerts/cpujul2021.html"
2021-07-20 14:01:27 -07:00
} ,
{
2025-04-30 23:00:39 +00:00
"url" : "https://nodejs.org/en/blog/release/v13.8.0/" ,
"refsource" : "MISC" ,
"name" : "https://nodejs.org/en/blog/release/v13.8.0/"
2021-07-21 15:02:04 +00:00
} ,
{
2025-04-30 23:00:39 +00:00
"url" : "https://nodejs.org/en/blog/vulnerability/february-2020-security-releases/" ,
"refsource" : "MISC" ,
"name" : "https://nodejs.org/en/blog/vulnerability/february-2020-security-releases/"
2021-07-21 15:02:04 +00:00
} ,
{
2025-04-30 23:00:39 +00:00
"url" : "https://nodejs.org/en/blog/release/v10.19.0/" ,
"refsource" : "MISC" ,
"name" : "https://nodejs.org/en/blog/release/v10.19.0/"
2021-07-21 15:02:04 +00:00
} ,
{
2025-04-30 23:00:39 +00:00
"url" : "https://nodejs.org/en/blog/release/v12.15.0/" ,
"refsource" : "MISC" ,
"name" : "https://nodejs.org/en/blog/release/v12.15.0/"
2021-07-21 15:02:04 +00:00
} ,
{
2025-04-30 23:00:39 +00:00
"url" : "https://security.netapp.com/advisory/ntap-20200221-0004/" ,
"refsource" : "MISC" ,
"name" : "https://security.netapp.com/advisory/ntap-20200221-0004/"
2021-07-21 15:02:04 +00:00
} ,
{
2025-04-30 23:00:39 +00:00
"url" : "https://hackerone.com/reports/730779" ,
2021-07-21 15:02:04 +00:00
"refsource" : "MISC" ,
2025-04-30 23:00:39 +00:00
"name" : "https://hackerone.com/reports/730779"
2020-02-07 15:01:12 +00:00
}
]
}
}
