CVE:CVE-2020-15095
CNNVD:CNNVD-202007-342
npm CLI是美国npm公司的一款软件包管理器。
npm CLI 6.14.6之前版本中存在日志信息泄露漏洞。该漏洞源于网络系统或产品的日志文件非正常输出。
solution:Upgrade npmjs npm to a higher version than 6.14.6,and avoid the version (,6.14.6); Upgrade opensuse leap to a higher version than 15.1,15.2,and avoid the version 15.1,15.2; Upgrade fedoraproject fedora to a higher version than 33,and avoid the version 33