CVE-2019-12998

2020-01-3120:15:10

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.0%

JSON

c-lightning before 0.7.1 allows attackers to trigger loss of funds because of Incorrect Access Control. NOTE: README.md states “It can be used for testing, but it should not be used for real funds.”

CPENameOperatorVersion
lightningeq0.6.1rc1
lightningeq0.5-2016-10-19
lightningeqwhere-the-500-went
lightningeq0.1-2015-08-08
lightningeq0.6.2rc1
lightningeq0.6.2
lightningeq0.7.0rc3
lightningeq0.2-2016-01-22
lightningeq0.7.0
lightningeq0.6.3rc1

Name	Operator	Version
lightning	eq	0.6.1rc1
lightning	eq	0.5-2016-10-19
lightning	eq	where-the-500-went
lightning	eq	0.1-2015-08-08
lightning	eq	0.6.2rc1
lightning	eq	0.6.2
lightning	eq	0.7.0rc3
lightning	eq	0.2-2016-01-22
lightning	eq	0.7.0
lightning	eq	0.6.3rc1