CVE-2021-22939CWE-295

If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to…

published August 16, 2021

CVSS
—
EPSS
15%
Percentile
96.7
In the wild
Unconfirmed
What it is

If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an expired certificate would have been accepted.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.14730 · 96.7th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2021-08-16T00:00Z
EPSS history
Timeline
  • 16 AUG 00:00Z
    If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to…
    cvelistv5