Home > Vulnerability Database > CVE-2024-45244

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2024-45244

Date: August 24, 2024

Hyperledger Fabric through 3.0.0 and 2.5.x through 2.5.9 do not verify that a request has a timestamp within the expected time window.

Language: Go

Severity Score

5.3

Related Resources (7)

Url: https://github.com/advisories/GHSA-48gg-32q2-4r6m

Url: https://github.com/hyperledger/fabric/commit/155457a6624b3c74b22e5729c35c8499bfe952cd

Url: https://github.com/hyperledger/fabric

Url: https://nvd.nist.gov/vuln/detail/CVE-2024-45244

Url: https://github.com/shanker-sec/HLF_TxTime_spoofing

Url: https://github.com/shanker-sec/hlf-time-oracle

Url: https://www.mend.io/vulnerability-database/CVE-2024-45244

Severity Score

5.3

Weakness Type (CWE)

Improper Authorization

CWE-285

Authentication Bypass by Capture-replay

CWE-294

Operation on a Resource after Expiration or Release

CWE-672

CVSS v3.1

Base Score:	5.3
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	LOW
Availability (A):	NONE

Do you need more information?

Contact Us