NetSight
IP …
critical9.8

CVE-2019-15606

Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons

Impact

Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons

Affected products

VendorProductAffected versions
NodejsNode.Js
from 10.0.0 before 10.19.0
from 12.0.0 before 12.15.0
from 13.0.0 before 13.8.0
OracleCommunications Cloud Native Core Network Function Cloud Native Environment
Version 1.4.0
OracleGraalvm
Versions 19.3.1, 20.0.0
DebianDebian Linux
Version 10.0
RedhatEnterprise Linux
Version 8.0
RedhatEnterprise Linux Eus
Version 8.1
OpensuseLeap
Version 15.1

Weakness classification

CWE-20

References