PT-2019-20066

Published

2019-08-23

·

Updated

2019-08-23

Description by

CVSS 3.1
9.1
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions libp2p-secio versions prior to 0.9.0
Description The issue is related to an identity spoofing problem where the PeerId of DstPeer is not correctly verified against the PeerId discovered during the crypto handshake. This results in a high severity vulnerability.
Recommendations Update to version 0.9.0 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-290: Authentication Bypass by Spoofing
Related identifiers
GHSA-RCH7-F4H5-X9RJ
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com