ISO 27001 Certificate
SOC 1 Type I Certificate
SOC 2 Type II Certificate
PCI DSS
HIPAA
RGPD
Internal validation & live display
Multiple badges & continuous verification
Faster underwriting decisions
ISOSOC2 Type 1SOC2 Type 2PCI DSSHIPAAGDPR

Sam’s Club (NYSE: WMT) a division of Walmart Inc., is the membership warehouse club solution for everyday living. Our President and CEO is Chris Nicholas and our headquarters is in Bentonville, AR. For the fiscal year ending January 31, 2023, Sam’s Club’s total revenue was $84.3 billion. There are almost 600 clubs across the U.S and Puerto Rico and each averages approximately 136,000 square feet. Our first club opened in Midwest City, Oklahoma, in 1983. Many clubs include sustainable features such as day-lighting with skylights, night dimming, central energy management, water-conserving fixtures, natural concrete floors and recycling. Sam’s Club employs thousands of associates in the U.S. and Puerto Rico. Approximately 75 percent of club management was promoted from hourly positions. In addition to the leading national brands, Sam's Club also features Member's Mark, an exclusive, premium-quality private brand. Member's Mark products are exclusive designs that use top-of-the-line materials and the highest quality ingredients to make sure they have the best quality and value at members-only prices. A Sam’s Club membership can more than pay for itself with exclusive savings on the items you need, the items you love and all sorts of unexpected items. Sam’s Club focuses on providing members with exclusive savings and quality merchandise, as well as services like Delivery from Club and Curbside Pickup, savings on fuel, full-service Pharmacy and more. We offer our members the most choices on how to shop with us, anywhere, any time. With over 40 years of innovating in the category, Sam’s Club continues to redefine club membership shopping with its curated assortment of quality fresh food and Member’s Mark® items, in addition to market leading technologies and services like Scan & Go™️, curbside pickup and home delivery. Visit the Sam's Club Newsroom, shop at SamsClub.com or connect with Sam's Club on LinkedIn, X, Facebook, Instagram, TikTok and Pinterest.

Sam's Club A.I CyberSecurity Scoring

Sam's Club

Company Details

Linkedin ID:

sam's-club

Employees number:

45,215

Number of followers:

381,258

NAICS:

43

Industry Type:

Retail

Homepage:

samsclub.com

IP Addresses:

1271

Company ID:

SAM_1414288

Scan Status:

Completed

AI scoreSam's Club Risk Score (AI oriented)

Between 700 and 749

https://images.rankiteo.com/companyimages/sam's-club.jpeg
Sam's Club Retail
Updated:
  • Powered by our proprietary A.I cyber incident model
  • Insurance preferes TPRM score to calculate premium
globalscoreSam's Club Global Score (TPRM)

XXXX

https://images.rankiteo.com/companyimages/sam's-club.jpeg
Sam's Club Retail
  • Instant access to detailed risk factors
  • Benchmark vs. industry & size peers
  • Vulnerabilities
  • Findings

Sam's Club Company CyberSecurity News & History

Past Incidents
3
Attack Types
2
EntityTypeSeverityImpactSeenBlog DetailsIncident DetailsView
Sam's ClubBreach8549/2020
Rankiteo Explanation :
Attack with significant impact with customers data leaks

Description: The California Office of the Attorney General disclosed a **data breach** targeting **Sam's Club** in October 2020, stemming from an incident on **September 24, 2020**. Unauthorized actors gained access to member accounts using **stolen login credentials**, compromising **personal information** of affected individuals. While the exact scope of exposed data was not detailed, such breaches typically involve sensitive details like names, contact information, membership IDs, or payment data—posing risks of identity theft, phishing, or financial fraud. The breach underscored vulnerabilities in credential security, highlighting the need for stronger authentication measures. Sam’s Club likely faced reputational damage and potential regulatory scrutiny, though no evidence suggested systemic operational disruption or ransomware involvement. Customers were advised to monitor accounts and update passwords, but the long-term impact on trust and membership retention remained a concern.

Sam’s ClubBreach85411/2023
Rankiteo Explanation :
Attack with significant impact with customers data leaks

Description: In mid-November, Sam’s Club reported a data breach where unauthorized individuals gained access to customer accounts using credentials likely obtained from an external source. The incident exposed sensitive personal information, including names, phone numbers, postal addresses, and payment card details. While the exact number of affected customers remains undisclosed, the breach poses significant risks such as identity theft, financial fraud, and reputational damage. The compromised payment card data could lead to fraudulent transactions, while the exposure of personal details increases the likelihood of targeted phishing or social engineering attacks. The breach underscores vulnerabilities in credential security and the potential for cascading harm when third-party credentials are reused across platforms. Customers are advised to monitor their accounts for suspicious activity and update their login credentials to mitigate further risks.

Sam's ClubRansomware10056/2020
Rankiteo Explanation :
Attack threatening the organization’s existence

Description: Sam's Club, a subsidiary of Walmart, is investigating a potential security incident following claims of a breach by the Clop ransomware gang. Clop has added Sam's Club to its leak site but has not yet released proof. The breach may involve the exploitation of a zero-day vulnerability in Cleo file transfer software, which Sam's Club may have used. Prior incidents include credential stuffing in 2020, but the current situation remains under investigation with no explicit customer or employee data known to be compromised.

Sam's Club
Breach
Severity: 85
Impact: 4
Seen: 9/2020
Blog:
Rankiteo Explanation
Attack with significant impact with customers data leaks

Description: The California Office of the Attorney General disclosed a **data breach** targeting **Sam's Club** in October 2020, stemming from an incident on **September 24, 2020**. Unauthorized actors gained access to member accounts using **stolen login credentials**, compromising **personal information** of affected individuals. While the exact scope of exposed data was not detailed, such breaches typically involve sensitive details like names, contact information, membership IDs, or payment data—posing risks of identity theft, phishing, or financial fraud. The breach underscored vulnerabilities in credential security, highlighting the need for stronger authentication measures. Sam’s Club likely faced reputational damage and potential regulatory scrutiny, though no evidence suggested systemic operational disruption or ransomware involvement. Customers were advised to monitor accounts and update passwords, but the long-term impact on trust and membership retention remained a concern.

Sam’s Club
Breach
Severity: 85
Impact: 4
Seen: 11/2023
Blog:
Rankiteo Explanation
Attack with significant impact with customers data leaks

Description: In mid-November, Sam’s Club reported a data breach where unauthorized individuals gained access to customer accounts using credentials likely obtained from an external source. The incident exposed sensitive personal information, including names, phone numbers, postal addresses, and payment card details. While the exact number of affected customers remains undisclosed, the breach poses significant risks such as identity theft, financial fraud, and reputational damage. The compromised payment card data could lead to fraudulent transactions, while the exposure of personal details increases the likelihood of targeted phishing or social engineering attacks. The breach underscores vulnerabilities in credential security and the potential for cascading harm when third-party credentials are reused across platforms. Customers are advised to monitor their accounts for suspicious activity and update their login credentials to mitigate further risks.

Sam's Club
Ransomware
Severity: 100
Impact: 5
Seen: 6/2020
Blog:
Rankiteo Explanation
Attack threatening the organization’s existence

Description: Sam's Club, a subsidiary of Walmart, is investigating a potential security incident following claims of a breach by the Clop ransomware gang. Clop has added Sam's Club to its leak site but has not yet released proof. The breach may involve the exploitation of a zero-day vulnerability in Cleo file transfer software, which Sam's Club may have used. Prior incidents include credential stuffing in 2020, but the current situation remains under investigation with no explicit customer or employee data known to be compromised.

Ailogo

Sam's Club Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

🔒
Incident Predictions locked
Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

🔒
A.I. Risk Score Predictions locked
Access Monitoring Plan
statics

Underwriter Stats for Sam's Club

Incidents vs Retail Industry Average (This Year)

No incidents recorded for Sam's Club in 2025.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Sam's Club in 2025.

Incident Types Sam's Club vs Retail Industry Avg (This Year)

No incidents recorded for Sam's Club in 2025.

Incident History — Sam's Club (X = Date, Y = Severity)

Sam's Club cyber incidents detection timeline including parent company and subsidiaries

Sam's Club Company Subsidiaries

SubsidiaryImage

Sam’s Club (NYSE: WMT) a division of Walmart Inc., is the membership warehouse club solution for everyday living. Our President and CEO is Chris Nicholas and our headquarters is in Bentonville, AR. For the fiscal year ending January 31, 2023, Sam’s Club’s total revenue was $84.3 billion. There are almost 600 clubs across the U.S and Puerto Rico and each averages approximately 136,000 square feet. Our first club opened in Midwest City, Oklahoma, in 1983. Many clubs include sustainable features such as day-lighting with skylights, night dimming, central energy management, water-conserving fixtures, natural concrete floors and recycling. Sam’s Club employs thousands of associates in the U.S. and Puerto Rico. Approximately 75 percent of club management was promoted from hourly positions. In addition to the leading national brands, Sam's Club also features Member's Mark, an exclusive, premium-quality private brand. Member's Mark products are exclusive designs that use top-of-the-line materials and the highest quality ingredients to make sure they have the best quality and value at members-only prices. A Sam’s Club membership can more than pay for itself with exclusive savings on the items you need, the items you love and all sorts of unexpected items. Sam’s Club focuses on providing members with exclusive savings and quality merchandise, as well as services like Delivery from Club and Curbside Pickup, savings on fuel, full-service Pharmacy and more. We offer our members the most choices on how to shop with us, anywhere, any time. With over 40 years of innovating in the category, Sam’s Club continues to redefine club membership shopping with its curated assortment of quality fresh food and Member’s Mark® items, in addition to market leading technologies and services like Scan & Go™️, curbside pickup and home delivery. Visit the Sam's Club Newsroom, shop at SamsClub.com or connect with Sam's Club on LinkedIn, X, Facebook, Instagram, TikTok and Pinterest.

Loading...
similarCompanies

Sam's Club Similar Companies

Pilot Flying J

Company Overview Headquartered in Knoxville, Tennessee, Pilot Flying J is the largest operator of travel centers in North America with more than 750 locations throughout the United States and Canada and employs more than 24,000 Team Members. Pilot Flying J services over a million guests every day.

Burlington Stores, Inc.

Burlington Stores, Inc., headquartered in New Jersey, is a nationally recognized off-price retailer. Burlington is a Fortune 500 company and its common stock is traded on the New York Stock Exchange under the ticker symbol “BURL.” The Company operates more than 1000 stores, in 46 states, Washington

Shoppers Stop

Shoppers Stop is one of the pioneers of modern retailing in India. Launched in 1991, Shoppers Stop was the first department store in the country that revolutionized the way modern India shopped. Today, with 81 stores across 37 cities and a growing online presence at www.shoppersstop.com, Shoppers St

Food Lion

Food Lion, based in Salisbury, N.C., and its 82,000 associates have a longstanding history of serving its customers and communities through 10 Southeastern and Mid-Atlantic states. Since 1957, we have been connected to the towns and cities we serve by providing an easy shopping experience anchored b

At Kroger, we believe no matter who you are or how you like to shop, everyone deserves affordable, easy-to-enjoy, fresh food. This idea is embodied in our simple tagline—Fresh for Everyone™. Kroger ranks as one of the world’s largest retailers. We are nearly half a million associates across 2,800

Somos la cadena de tiendas de conveniencia más grande de México y América Latina, con 45 años de experiencia y más de 22 mil establecimientos ubicados a lo largo de la República Mexicana, Colombia, Perú, Chile y Brasil. En OXXO como compañía 100% mexicana y como parte de la División Proxi

Carrefour

The Carrefour Group: one of the world’s leading retailers In 50 years, the Carrefour Group has become a world leader in the retail sector. The second largest retailer in the world and the largest in Europe, the Group now features four major grocery retail formats: hypermarkets, supermarkets, cash

Pick n Pay

Welcome to Pick n Pay, where family values and customer-centricity converge to create an unparalleled shopping experience. Since 1967, when the visionary Raymond Ackerman championed the cause of consumers by acquiring the first few stores, the Ackerman family's dedication has steered our journey of

Ahold Delhaize

Ahold Delhaize is one of the world’s largest food retail groups, we are a leader in supermarkets and e-commerce, and a company at the forefront of sustainable retailing. Our local brands employ around 393,000 associates in around 9,400 local grocery, small format, and specialty stores. Our family

newsone

Sam's Club CyberSecurity News

November 03, 2025 12:00 PM
A Day in the Life of a Cybersecurity Analyst

Read how St. John's University, Queens, NY, alumnus Sam Daniele '24CCPS turned his passion for technology into a successful cybersecurity...

October 14, 2025 06:48 PM
Scouts will now be able to earn badges in AI and cybersecurity

(CNN) — Scouting America, the organization formerly known as the Boy Scouts, is giving scouts the chance to earn two merit badges that...

September 03, 2025 07:00 AM
Government to amend cybersecurity act to address emerging digital threats - Sam George announces

The Minister of Communication, Digital Technology and Innovations, Samuel Nartey George, has announced that government is working to amend...

July 24, 2025 07:00 AM
Global hack hits US agencies via Microsoft SharePoint flaw, cybersecurity expert warns

Hackers exploited a major security flaw in widely used Microsoft server software to launch a global attack on government agencies and...

July 24, 2025 07:00 AM
The Real Issues of the Clorox Hack

Beyond the losses, lawsuit and blame-game lie vitally important lessons for industrial cybersecurity.

June 30, 2025 07:00 AM
Ahold USA gives update on cybersecurity issue

Ahold Delhaize USA Services provides an update about the cybersecurity issue the company previously disclosed last year.

June 30, 2025 07:00 AM
UNFI expects financial hit from cyberattack as recovery continues

Major North American grocery wholesaler United Natural Foods, Inc., has disclosed that the cyberattack it experienced earlier this month...

June 10, 2025 07:00 AM
Grocery wholesaler UNFI hit by cyberattack, operations affected

United Natural Foods (UNFI) has informed law enforcement and is working to mitigate the attack's impact with the help of cybersecurity...

April 24, 2025 07:00 AM
Ex-Sam’s Club worker drops data breach lawsuit

The retailer previously said it was investigating a potential cyber attack related to a vulnerability in a vendor's file transfer software.

faq

Frequently Asked Questions

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.

Sam's Club CyberSecurity History Information

Official Website of Sam's Club

The official website of Sam's Club is http://www.samsclub.com.

Sam's Club’s AI-Generated Cybersecurity Score

According to Rankiteo, Sam's Club’s AI-generated cybersecurity score is 732, reflecting their Moderate security posture.

How many security badges does Sam's Club’ have ?

According to Rankiteo, Sam's Club currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Does Sam's Club have SOC 2 Type 1 certification ?

According to Rankiteo, Sam's Club is not certified under SOC 2 Type 1.

Does Sam's Club have SOC 2 Type 2 certification ?

According to Rankiteo, Sam's Club does not hold a SOC 2 Type 2 certification.

Does Sam's Club comply with GDPR ?

According to Rankiteo, Sam's Club is not listed as GDPR compliant.

Does Sam's Club have PCI DSS certification ?

According to Rankiteo, Sam's Club does not currently maintain PCI DSS compliance.

Does Sam's Club comply with HIPAA ?

According to Rankiteo, Sam's Club is not compliant with HIPAA regulations.

Does Sam's Club have ISO 27001 certification ?

According to Rankiteo,Sam's Club is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Industry Classification of Sam's Club

Sam's Club operates primarily in the Retail industry.

Number of Employees at Sam's Club

Sam's Club employs approximately 45,215 people worldwide.

Subsidiaries Owned by Sam's Club

Sam's Club presently has no subsidiaries across any sectors.

Sam's Club’s LinkedIn Followers

Sam's Club’s official LinkedIn profile has approximately 381,258 followers.

NAICS Classification of Sam's Club

Sam's Club is classified under the NAICS code 43, which corresponds to Retail Trade.

Sam's Club’s Presence on Crunchbase

No, Sam's Club does not have a profile on Crunchbase.

Sam's Club’s Presence on LinkedIn

Yes, Sam's Club maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/sam's-club.

Cybersecurity Incidents Involving Sam's Club

As of November 27, 2025, Rankiteo reports that Sam's Club has experienced 3 cybersecurity incidents.

Number of Peer and Competitor Companies

Sam's Club has an estimated 15,247 peer or competitor companies worldwide.

What types of cybersecurity incidents have occurred at Sam's Club ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach and Ransomware.

Incident Details

Can you provide details on each incident ?

Incident : Ransomware

Title: Potential Security Incident at Sam's Club

Description: Sam's Club, a subsidiary of Walmart, is investigating a potential security incident following claims of a breach by the Clop ransomware gang. Clop has added Sam's Club to its leak site but has not yet released proof. The breach may involve the exploitation of a zero-day vulnerability in Cleo file transfer software, which Sam's Club may have used. Prior incidents include credential stuffing in 2020, but the current situation remains under investigation with no explicit customer or employee data known to be compromised.

Type: Ransomware

Attack Vector: Zero-day vulnerability exploitation

Vulnerability Exploited: Cleo file transfer software

Threat Actor: Clop ransomware gang

Incident : Data Breach / Unauthorized Access

Title: Sam’s Club Unauthorized Account Access Incident

Description: In mid-November, unauthorized access to Sam’s Club customer accounts occurred using login credentials likely obtained from another source. The breach may have compromised personal information such as names, phone numbers, postal addresses, and payment card details, but the number of affected individuals is unknown.

Type: Data Breach / Unauthorized Access

Attack Vector: Credential Stuffing / Account Takeover

Incident : Data Breach

Title: Sam's Club Data Breach (2020)

Description: The California Office of the Attorney General reported a data breach involving Sam's Club on October 21, 2020. The breach occurred on September 24, 2020, due to unauthorized access to accounts using stolen login credentials, potentially affecting various personal information of members.

Date Detected: 2020-09-24

Date Publicly Disclosed: 2020-10-21

Type: Data Breach

Attack Vector: Unauthorized Access (Stolen Credentials)

What are the most common types of attacks the company has faced ?

Common Attack Types: The most common types of attacks the company has faced is Breach.

How does the company identify the attack vectors used in incidents ?

Identification of Attack Vectors: The company identifies the attack vectors used in incidents through Compromised credentials (likely from another source) and Stolen Login Credentials.

Impact of the Incidents

What was the impact of each incident ?

Incident : Data Breach / Unauthorized Access SAM021091825

Data Compromised: Names, Phone numbers, Postal addresses, Payment card details

Identity Theft Risk: Potential (due to PII exposure)

Payment Information Risk: Potential (payment card details exposed)

Incident : Data Breach SAM025091825

Data Compromised: Personal information

Identity Theft Risk: Potential

What types of data are most commonly compromised in incidents ?

Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Personally Identifiable Information (Pii), Payment Card Information, , Personal Information and .

Which entities were affected by each incident ?

Incident : Ransomware SAM248032825

Entity Name: Sam's Club

Entity Type: Retail

Industry: Retail

Incident : Data Breach / Unauthorized Access SAM021091825

Entity Name: Sam’s Club

Entity Type: Retailer

Industry: Retail / Wholesale

Customers Affected: Unknown

Incident : Data Breach SAM025091825

Entity Name: Sam's Club

Entity Type: Retail

Industry: Retail / Wholesale

Location: United States (California)

Data Breach Information

What type of data was compromised in each breach ?

Incident : Data Breach / Unauthorized Access SAM021091825

Type of Data Compromised: Personally identifiable information (pii), Payment card information

Number of Records Exposed: Unknown

Sensitivity of Data: High (includes PII and payment details)

Incident : Data Breach SAM025091825

Type of Data Compromised: Personal information

Personally Identifiable Information: Potential

Ransomware Information

Was ransomware involved in any of the incidents ?

Incident : Ransomware SAM248032825

Ransomware Strain: Clop

Regulatory Compliance

Were there any regulatory violations and fines imposed for each incident ?

Incident : Data Breach SAM025091825

Regulatory Notifications: California Office of the Attorney General

References

Where can I find more information about each incident ?

Incident : Data Breach SAM025091825

Source: California Office of the Attorney General

Where can stakeholders find additional resources on cybersecurity best practices ?

Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: California Office of the Attorney General.

Investigation Status

What is the current status of the investigation for each incident ?

Incident : Ransomware SAM248032825

Investigation Status: Under investigation

Initial Access Broker

How did the initial access broker gain entry for each incident ?

Incident : Data Breach / Unauthorized Access SAM021091825

Entry Point: Compromised credentials (likely from another source)

Incident : Data Breach SAM025091825

Entry Point: Stolen Login Credentials

Post-Incident Analysis

What were the root causes and corrective actions taken for each incident ?

Incident : Data Breach SAM025091825

Root Causes: Unauthorized Access Via Stolen Credentials,

Additional Questions

General Information

Who was the attacking group in the last incident ?

Last Attacking Group: The attacking group in the last incident was an Clop ransomware gang.

Incident Details

What was the most recent incident detected ?

Most Recent Incident Detected: The most recent incident detected was on 2020-09-24.

What was the most recent incident publicly disclosed ?

Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2020-10-21.

Impact of the Incidents

What was the most significant data compromised in an incident ?

Most Significant Data Compromised: The most significant data compromised in an incident were Names, Phone Numbers, Postal Addresses, Payment Card Details, , Personal Information and .

Data Breach Information

What was the most sensitive data compromised in a breach ?

Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Phone Numbers, Names, Postal Addresses, Payment Card Details and Personal Information.

What was the number of records exposed in the most significant breach ?

Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 0.

References

What is the most recent source of information about an incident ?

Most Recent Source: The most recent source of information about an incident is California Office of the Attorney General.

Investigation Status

What is the current status of the most recent investigation ?

Current Status of Most Recent Investigation: The current status of the most recent investigation is Under investigation.

Initial Access Broker

What was the most recent entry point used by an initial access broker ?

Most Recent Entry Point: The most recent entry point used by an initial access broker were an Compromised credentials (likely from another source) and Stolen Login Credentials.

cve

Latest Global CVEs (Not Company-Specific)

Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.

Risk Information
cvss4
Base: 7.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Access Data Using Our API

SubsidiaryImage

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=sam's-club' -H 'apikey: YOUR_API_KEY_HERE'

What Do We Measure ?

revertimgrevertimgrevertimgrevertimg
Incident
revertimgrevertimgrevertimgrevertimg
Finding
revertimgrevertimgrevertimgrevertimg
Grade
revertimgrevertimgrevertimgrevertimg
Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network Security

Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)

Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)

Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat Intelligence

Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Top LeftTop RightBottom LeftBottom Right
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
Users Love Us Badge