CVE:CVE-2020-8172
CNNVD:CNNVD-202006-292
Joyent Node.js是美国Joyent公司的一套建立在Google V8 JavaScript引擎之上的网络应用平台。该平台主要用于构建高度可伸缩的应用程序，以及编写能够处理数万条且同时连接到一个物理机的连接代码。
Joyent Node.js 12.18.0之前版本和14.4.0之前版本中存在信任管理问题漏洞。攻击者可利用该漏洞绕过主机证书验证。
solution:Upgrade nodejs node.js to a higher version than 12.18.0,14.4.0,and avoid the version [12.0.0,12.18.0),[14.0.0,14.4.0); Upgrade oracle banking_extensibility_workbench to a higher version than 14.3.0,14.4.0,and avoid the version 14.3.0,14.4.0; Upgrade oracle blockchain_platform to a higher version than 21.1.2,and avoid the version (,21.1.2); Upgrade oracle graalvm to a higher version than 19.3.2,20.1.0,and avoid the version 19.3.2,20.1.0; Upgrade oracle mysql_cluster to a higher version than 7.3.30,7.4.29,7.5.19,7.6.15,8.0.21,and avoid the version (,7.3.30],[7.4.0,7.4.29],[7.5.0,7.5.19],[7.6.0,7.6.15],[8.0.0,8.0.21]