CVE-2020-15302
High
Description
In Argent RecoveryManager before 0xdc350d09f71c48c5D22fBE2741e4d6A03970E192, the executeRecovery function does not require any signatures in the zero-guardian case, which allows attackers to cause a denial of service (locking) or a takeover.
SeverityHigh
CVSS7.5
Exploit probability—
ProductArgent Recoverymanager
PublishedJun 25, 2020
First seenJun 25, 2020
How to fix
Update
- argent recoverymanager0xdc350d09f71c48c5d22fbe2741e4d6a03970e192 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| argent recoverymanager | v < 0xdc350d09f71c48c5d22fbe2741e4d6a03970e192 | 0xdc350d09f71c48c5d22fbe2741e4d6a03970e192 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.