Man-in-the-Middle (MitM) Attacks

2016-12-0606:01:06

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

54.8%

JSON

galenframework-cli is vulnerable to man-in-the-middle attacks. The library downloads binaries via HTTP, allowing a malicious user to swap out the requested binary with another binary for the system to execute.

CPENameOperatorVersion
galenframework-clile2.3.0
galenframework-clile2.0.7

CPE	Name	Operator	Version
	galenframework-cli	le	2.3.0
	galenframework-cli	le	2.0.7

References

github.com/hypery2k/galenframework-cli/issues/40

nodesecurity.io/advisories/170

0.002 Low

EPSS

Percentile

54.8%

JSON

Related for VERACODE:3084