Incorrect Account Used for Signing

🗓️ 24 Mar 2020 15:59:08Reported by GitHub Advisory DatabaseType

Incorrect Account Used for Signing. Impact on BIP44 accounts. Patched in version >=0.2.1 of eth-ledger-bridge-keyring and >=0.2.2 of @metamask/eth-ledger-bridge-keyring. Workaround: remove then re-add the account before use

Vulners

Node

metamask eth\-ledger\-bridge\-keyringRange<0.2.2

eth\-ledger\-bridge\-keyringRange<0.2.1

Source	Link
github	www.github.com/MetaMask/eth-ledger-bridge-keyring/security/advisories/GHSA-vg44-fw64-cpjx
github	www.github.com/MetaMask/eth-ledger-bridge-keyring/pull/14
github	www.github.com/MetaMask/eth-ledger-bridge-keyring/commit/f32e529d13a53e55f558d903534d631846dc26ce
github	www.github.com/advisories/GHSA-vg44-fw64-cpjx
npmjs	www.npmjs.com/advisories/1497
npmjs	www.npmjs.com/advisories/1498
snyk	www.snyk.io/vuln/SNYK-JS-ETHLEDGERBRIDGEKEYRING-561121

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Mar 2020 15:08Current

2.1Low risk

Vulners AI Score2.1

CWE-287