CVEvulnerability

CVE-2024-49406

4.4 MEDIUM Published 2024-11-06 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-11-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-354

Description

Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16 allows local attackers to modify transaction. Root privilege is required for triggering this vulnerability.

Affected configurations

• samsung blockchain keystore (< 1.3.16)

Related

Weakness · CWE (1)

  • CWE-354 Improper Validation of Integrity Check Value weakness

References