Lucene search

K
osvGoogleOSV:BIT-HYPERLEDGER-FABRIC-TOOLS-2024-45244
HistorySep 13, 2024 - 7:06 a.m.

BIT-hyperledger-fabric-tools-2024-45244

2024-09-1307:06:32
Google
osv.dev
1
hyperledger fabric
timestamp verification
security issue

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

6.7

Confidence

Low

Hyperledger Fabric through 2.5.9 does not verify that a request has a timestamp within the expected time window.

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

6.7

Confidence

Low

Related for OSV:BIT-HYPERLEDGER-FABRIC-TOOLS-2024-45244