Lucene search

K
prionPRIOn knowledge basePRION:CVE-2024-21669
HistoryJan 11, 2024 - 6:15 a.m.

Format string

2024-01-1106:15:00
PRIOn knowledge base
www.prio-n.com
4
hyperledger aries cloud
decentralized identity
json-ld
linked data proofs
verifiable credentials
security flaw
vulnerability
version 0.7.0
version 0.10.5

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

25.8%

Hyperledger Aries Cloud Agent Python (ACA-Py) is a foundation for building decentralized identity applications and services running in non-mobile environments. When verifying W3C Format Verifiable Credentials using JSON-LD with Linked Data Proofs (LDP-VCs), the result of verifying the presentation document.proof was not factored into the final verified value (true/false) on the presentation record. The flaw enables holders of W3C Format Verifiable Credentials using JSON-LD with Linked Data Proofs (LDPs) to present incorrectly constructed proofs, and allows malicious verifiers to save and replay a presentation from such holders as their own. This vulnerability has been present since version 0.7.0 and fixed in version 0.10.5.

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

25.8%

Related for PRION:CVE-2024-21669