Description
Affected versions of ibm_db insecurely download resources over HTTP.
In scenarios where an attacker has a privileged network position, they can modify or read such resources at will.
Recommendation
Update the ibm_db package to the latest compatible version. Followings are version details:
- Affected version(s): < 1.0.2
- Patched version(s): 1.0.2
References
Related Issues
- jdf-sass downloads Resources over HTTP - CVE-2016-10595
- slimerjs-edge downloads Resources over HTTP - CVE-2016-10644
- Downloads Resources over HTTP in webdrvr - CVE-2016-10601
- Downloads Resources over HTTP in phantomjs-cheniu - CVE-2016-10661
You might also like:
- Tags:
- npm
- ibm_db
Anything's wrong? Let us know Last updated on September 16, 2023