Skip to content
OpenAdvisories
Medium · 4.0 CVE-2017-12117 EUVD-2017-3701GHSA-3qxr-h63q-m7x3

An exploitable improper authorization vulnerability exists in miner_start API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a…

Published Jan 19, 2018 · Updated Sep 17, 2024 · Assigned by talos

Description

An exploitable improper authorization vulnerability exists in miner_start API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Talos CPP-Ethereum Ethereum commit 4e1015743b95821849d001618a7ce82c7c073768 —

References