PT-2020-14343
CVE-2020-15302
·
تاريخ النشر
2020-06-25
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Argent RecoveryManager versions prior to 0xdc350d09f71c48c5D22fBE2741e4d6A03970E192
Description
The issue allows attackers to cause a denial of service (locking) or a takeover due to the executeRecovery function not requiring any signatures in the zero-guardian case.
Recommendations
For versions prior to 0xdc350d09f71c48c5D22fBE2741e4d6A03970E192, consider disabling the
executeRecovery function as a temporary workaround until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾