Hyperledger Fabric does not verify request has a timestamp within the expected time window

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-45244 · ADVISORY
• hyperledger/fabric commit 155457a · WEB
• hyperledger/fabric · PACKAGE
• shanker-sec/HLF_TxTime_spoofing · WEB
• shanker-sec/hlf-time-oracle · WEB
• GitHub Advisory GHSA-48gg-32q2-4r6m · ADVISORY

github.com/hyperledger/fabric のその他の脆弱性

• CVE-2023-46132中 6.5Hyperledger Fabric is an open source permissioned distributed ledger framework. Combining two molecules to one another, called "cross-linkin…
• CVE-2022-36023中 5.3Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. If a gateway …
• CVE-2022-31121高 7.5Hyperledger Fabric is a permissioned distributed ledger framework. In affected versions if a consensus client sends a malformed consensus re…
• CVE-2021-43669高 7.5A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.0.1, v2.3.0. It can easily break down as many orderers as the att…
• CVE-2021-43667高 7.5A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.1.0. This bug can be leveraged by constructing a message whose pa…