~ / search / GHSA-78hj-86cr-6j2v

GHSA-78hj-86cr-6j2v

Improper Access Control in Lightning Network Daemon

Source: GitHub Advisory Database (reviewed) High CVE-2019-12999

Packages

EcosystemPackageAffectedFixed in
Go github.com/lightningnetwork/lnd < 0.7.1-beta 0.7.1-beta

Details

As written in the advisory (Markdown source, shown as plain text).

Lightning Network Daemon (lnd) before 0.7 allows attackers to trigger loss of funds because of Incorrect Access Control.

References

External links from the advisory. They lead to third-party sites.