Lucene search
+L

3 matches found

Positive Technologies
Positive Technologies
added 2018/01/19 12:0 a.m.8 views

PT-2018-5359 · Ethereum · Cpp-Ethereum

Name of the Vulnerable Software and Affected Versions: cpp-ethereum version affected versions not specified Description: An issue exists in the miner stop API endpoint of cpp-ethereum's JSON-RPC, where improper authorization can be exploited. An attacker can send JSON data to trigger this issue...

8.1CVSS4.3AI score0.01599EPSS
SaveExploits2References3
CNVD
CNVD
added 2018/01/10 12:0 a.m.8 views

CPP-Ethereum JSON-RPC Incorrect Authorization Vulnerability (CNVD-2018-02800)

CPP-Ethereum is a C++ client for Ethereum Application Programming Platform.JSON-RPC is one of the remote invocation services using JSON as the protocol. An incorrect authorization vulnerability exists in the minerstop API for JSON-RPC in CPP-Ethereum commit version...

8.1CVSS7.2AI score0.01599EPSS
SaveExploits2References1
Talos
Talos
added 2018/01/09 12:0 a.m.50 views

CPP-Ethereum JSON-RPC miner_stop improper authorization Vulnerability

Summary An exploitable improper authorization vulnerability exists in minerstop API of cpp-ethereum’s JSON-RPC commit 4e1015743b95821849d001618a7ce82c7c073768. A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigge...

8.1CVSS6.2AI score0.01599EPSS
SaveExploits2
Rows per page
Query Builder