Skip to content
OpenAdvisories
Medium · 4.0 CVE-2017-12114 EUVD-2017-3698GHSA-65gc-65c8-rc75

An exploitable improper authorization vulnerability exists in admin_peers API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a…

Published Jan 19, 2018 · Updated Sep 17, 2024 · Assigned by talos

Description

An exploitable improper authorization vulnerability exists in admin_peers API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Talos CPP-Ethereum Ethereum commit 4e1015743b95821849d001618a7ce82c7c073768 —

References