Skip to content
OpenAdvisories
Medium · 6.8 CVE-2017-12115 EUVD-2017-3699GHSA-656q-c3hc-863w

An exploitable improper authorization vulnerability exists in miner_setEtherbase API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d…

Published Jan 19, 2018 · Updated Sep 16, 2024 · Assigned by talos

Description

An exploitable improper authorization vulnerability exists in miner_setEtherbase API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass.

Affected products

VendorProductAffectedFixed
Talos CPP-Ethereum Ethereum commit 4e1015743b95821849d001618a7ce82c7c073768 —

References