Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-5448
HistoryJul 30, 2019 - 9:15 p.m.

Authentication flaw

2019-07-3021:15:00
PRIOn knowledge base
www.prio-n.com
6

7.9 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.2%

Yarn before 1.17.3 is vulnerable to Missing Encryption of Sensitive Data due to HTTP URLs in lockfile causing unencrypted authentication data to be sent over the network.

CPENameOperatorVersion
yarnlt1.17.3

7.9 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.2%