PT-2021-22425 · Unknown · Openzeppelin
Published
2021-08-26
·
Updated
2021-09-01
·
CVE-2021-39168
CVSS v3.1
10
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
OpenZeppelin versions prior to 4.3.1
OpenZeppelin versions prior to 3.4.2
OpenZeppelin versions prior to 3.4.2-solc-0.7
Description
A vulnerability in
TimelockController allowed an actor with the executor role to escalate privileges, gaining unrestricted access to assets held in the contract. This issue can be exploited by resetting the delay to 0, thus taking immediate control of the timelock. Instances with the executor role set to "open" are particularly at risk, as anyone can use the executor role, leaving the timelock vulnerable to being taken over by an attacker.Recommendations
For versions prior to 4.3.1, update to version 4.3.1 or later.
For versions prior to 3.4.2, update to version 3.4.2 or later.
For versions prior to 3.4.2-solc-0.7, update to version 3.4.2-solc-0.7 or later.
As a temporary workaround, consider revoking the
executor role from accounts not strictly under the team's control, ensuring there is at least one proposer and executor remaining.Fix
Improper Privilege Management
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Openzeppelin