PT-2018-6079 · Npm · Sqlite
Publicado
2018-06-04
·
Atualizado
2019-10-09
·
CVE-2017-16051
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
sqliter versions all
Description:
The issue concerns a malicious module named
sqliter that was designed to steal environment variables and send them to attacker-controlled locations. All versions of this module have been unpublished from the npm registry. If this module is found installed, the primary security concern is determining how it was installed in the environment.Recommendations:
Delete the
sqliter package from your environment.
Clear your npm cache to prevent any potential reuse of the malicious package.
Ensure the sqliter package is not present in any other package.json files on your system to prevent its accidental reinstatement.
Regenerate your registry credentials, tokens, and any other sensitive credentials that may have been exposed via environment variables to minimize the risk of further unauthorized access.
Review any services that may have been exposed via credentials in your environment variables, such as databases, for indicators of compromise to assess the extent of the potential damage.Correção
RCE
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Sqlite