CVE-2024-49406

Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16 allows local attackers to modify transaction

Medium · published November 6, 2024

CVSS v3.1
6.7
EPSS
0%
Percentile
0.9
In the wild
Unconfirmed
What it is

Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16 allows local attackers to modify transaction. Root privilege is required for triggering this vulnerability.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00102 · 0.9th percentile
Published
2024-11-06T02:17Z
EPSS history
Timeline
  • 06 NOV 02:17Z
    Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16 allows local attackers to modify transaction
    cvelistv5