The host is installed with Node.js 8.0.0 before 8.15.1 or 6.0.0 before 6.17.0 and is prone to an observable discrepancy vulnerability. A flaw is present in the application which fails to handle TLS server. On successful exploitation, TLS server can be forced to respond differently to a client if a zero-byte record is received with an invalid padding compared to a zero-byte record with an invalid MAC.