If the Node.js https API was used incorrectly and undefined was in passed for the rejectUnauthorized parameter, no error was returned and connections to servers with an expired certificate would have been accepted.
The product does not validate, or incorrectly validates, a certificate.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Node.js | Nodejs | 12.0.0 (including) | 12.22.5 (excluding) |
| Node.js | Nodejs | 14.0.0 (including) | 14.17.5 (excluding) |
| Node.js | Nodejs | 16.0.0 (including) | 16.6.2 (excluding) |