Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47598
HistoryJun 18, 2024 - 8:26 a.m.

Improper Authorization

2024-06-1808:26:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
evmos
vulnerability
improper authorization
create validator
vested tokens

CVSS3

3.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

AI Score

6.6

Confidence

High

Evmos is vulnerable to Improper Authorization. The vulnerability is due to allowing a user to create a validator using vested tokens to deposit the self-bond.

CVSS3

3.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

AI Score

6.6

Confidence

High

Related for VERACODE:47598