CVE-2019-12997

In Loopchain through 2.2.1.3, an attacker can escalate privileges from a low-privilege shell by changing the environment (aka injection in the DEFAULT_SCORE_HOST environment variable).

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2019-06-28

Last modified

2024-08-04

Weaknesses

CWE-78

Affected products

• Loopchain (Icon)

References

• https://github.com/icon-project/loopchain/issues/231