CVE-2022-47930

Aliases:GHSA-c58h-qv6g-fw74GO-2023-1867
Advisory lineage Upstream: 0 Downstream: 2
Modified
Published: 21 Apr 2023, 00:00
Last modified:05 Feb 2025, 14:50

Vulnerability Summary

Overall Risk (default)
medium
27/100
CVSS Score
6.8 MEDIUM
v3.1 (cve.org)
EPSS Score
0.1% LOW
0% probability +0.03%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

21 Apr 2023, 00:00
Published
Vulnerability first disclosed
05 Feb 2025, 14:50
Last Modified
Vulnerability information updated

Description

An issue was discovered in IO FinNet tss-lib before 2.0.0. The parameter ssid for defining a session id is not used through the MPC implementation, which makes replaying and spoofing of messages easier. In particular, the Schnorr proof of knowledge implemented in sch.go does not utilize a session id, context, or random nonce in the generation of the challenge. This could allow a malicious user or an eavesdropper to replay a valid proof sent in the past.

CVSS Metrics

  • v3.1•MEDIUM•Score: 6.8CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS Trends

Current EPSS score: 0.10%• Percentile: 27%

Techniques & Countermeasures

  • CWE-294•Authentication Bypass by Capture-replay

    A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).

Affected Systems

  • github.com/binance-chain•tss-lib

    < 2.0.0 | all

  • github.com/bnb-chain•tss-lib

    < 2.0.0 | all

  • iofinnet•tss-lib

    < 2.0.0

References (7)