CVE-2017-16204
N/A
N/A
Summary
The jquey module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| HackerOne | jquey node module | 1.0.1 | affected |
Weaknesses
- CWE-506: Embedded Malicious Code (CWE-506)
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.