exploitDog

CVE-2019-12999

Опубликовано: 31 янв. 2020

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Lightning Network Daemon (lnd) before 0.7 allows attackers to trigger loss of funds because of Incorrect Access Control.

Ссылки

https://github.com/lightningnetwork/lnd/commits/master
Patch
Third Party Advisory
https://github.com/lightningnetwork/lnd/releases/tag/v0.7.0-beta
Release Notes
Third Party Advisory
https://lists.linuxfoundation.org/pipermail/lightning-dev/2019-September/002174.html
Exploit
Mailing List
Third Party Advisory
https://github.com/lightningnetwork/lnd/commits/master
Patch
Third Party Advisory
https://github.com/lightningnetwork/lnd/releases/tag/v0.7.0-beta
Release Notes
Third Party Advisory
https://lists.linuxfoundation.org/pipermail/lightning-dev/2019-September/002174.html
Exploit
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:lightning:network_daemon:*:*:*:*:*:*:*:*

Версия до 0.7 (исключая)

EPSS

Процентиль: 74%

0.00817

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2019-12999

CVSS3: 7.5

debian

около 6 лет назад

Lightning Network Daemon (lnd) before 0.7 allows attackers to trigger ...

GHSA-78hj-86cr-6j2v

CVSS3: 7.5

github

больше 4 лет назад

Improper Access Control in Lightning Network Daemon

EPSS

Процентиль: 74%

0.00817

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-Other