Sigmund Gorski

Name of the Vulnerable Software and Affected Versions: BlockchainTZService versions prior to SMR Sep-2021 Release 1 Description: The issue is related to an improper access control in the `sspInit()` function within BlockchainTZService. This allows attackers to start the BlockchainTZService. Recommendations: For versions prior to SMR Sep-2021 Release 1, update to SMR Sep-2021 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the `sspInit()` function to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: BlockchainTZService versions prior to SMR Sep-2021 Release 1 Description: The issue is related to an improper access control in the `sspExit()` function within BlockchainTZService, allowing attackers to terminate the service. Recommendations: For versions prior to SMR Sep-2021 Release 1, update to SMR Sep-2021 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the `sspExit()` function to minimize the risk of exploitation.