high7.5
CVE-2018-3756
Hyperledger Iroha versions v1.0_beta and v1.0.0_beta-1 are vulnerable to transaction and block signature verification bypass in the transaction and block valid…
Impact
Hyperledger Iroha versions v1.0_beta and v1.0.0_beta-1 are vulnerable to transaction and block signature verification bypass in the transaction and block validator allowing a single node to sign a transaction and/or block multiple times, each with a random nonce, and have other validating nodes accept them as separate valid signatures.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hyperledger | Iroha | Versions 1.0, 1.0.0 |