CVE-2022-32222

A cryptographic vulnerability exists on Node.js on linux in versions of 18.x prior to 18.40.0 which allowed a default path for openssl.cnf that might be…

published July 14, 2022

CVSS
—
EPSS
2%
Percentile
82.3
In the wild
Unconfirmed
What it is

A cryptographic vulnerability exists on Node.js on linux in versions of 18.x prior to 18.40.0 which allowed a default path for openssl.cnf that might be accessible under some circumstances to a non-admin user instead of /etc/ssl as was the case in versions prior to the upgrade to OpenSSL 3.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02186 · 82.3th percentile
Published
2022-07-14T00:00Z
EPSS history
Timeline
  • 14 JUL 00:00Z
    A cryptographic vulnerability exists on Node.js on linux in versions of 18.x prior to 18.40.0 which allowed a default path for openssl.cnf that might be…
    cvelistv5