Lucene search
+L

1 matches found

Code423n4
Code423n4
added 2023/06/13 12:0 a.m.15 views

malicious policyholder can forbid setRoleHolder/revokeExpiredRole/revokePolicy calls

Lines of code Vulnerability details Impact All policyholders can't trigger functions related to setRoleHolder, such as setRoleHolder/revokeExpiredRole/revokePolicy. So malicious hackers can achieve DoS or use expired roles for a long unexpected time. Proof of Concept In...

6.8AI score
SaveExploits0
Rows per page
Query Builder