CVE-2017-12116

An exploitable improper authorization vulnerability exists in miner_setGasPrice API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigger this vulnerability.

Score

CVSS 3.1 8.1 High

Status

Modified - talos-cna@cisco.com

Published

2018-01-19

Last modified

2024-09-17

Weaknesses

CWE-863

Affected products

• Aleth (Ethereum)
• Cpp-ethereum (Talos)

References

• http://www.securityfocus.com/bid/102475
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0468