Skip to content
OpenAdvisories
Medium · 6.8 CVE-2017-12116 EUVD-2017-3700GHSA-647h-9mh3-p4p7

An exploitable improper authorization vulnerability exists in miner_setGasPrice API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d0…

Published Jan 19, 2018 · Updated Sep 17, 2024 · Assigned by talos

Description

An exploitable improper authorization vulnerability exists in miner_setGasPrice API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Talos CPP-Ethereum Ethereum commit 4e1015743b95821849d001618a7ce82c7c073768 —

References