Skip to content
OpenAdvisories
Unscored CVE-2018-3756 EUVD-2018-0149GHSA-jmw4-vrcr-pppgPYSEC-2018-150

Hyperledger Iroha versions v1.0_beta and v1.0.0_beta-1 are vulnerable to transaction and block signature verification bypass in the transac…

Published Jun 1, 2018 · Updated Sep 17, 2024 · Assigned by hackerone

Description

Hyperledger Iroha versions v1.0_beta and v1.0.0_beta-1 are vulnerable to transaction and block signature verification bypass in the transaction and block validator allowing a single node to sign a transaction and/or block multiple times, each with a random nonce, and have other validating nodes accept them as separate valid signatures.

References