PT-2023-11382 · Unknown · Ethex Contracts

Published 2023-12-18 · Updated 2024-05-17 · CVE-2019-25157

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Ethex Contracts (affected versions not specified)

Description A critical issue has been found in Ethex Contracts, affecting an unknown part of the file EthexJackpot.sol of the component Monthly Jackpot Handler. This issue leads to improper access controls and can be initiated remotely.

Recommendations Apply the patch named 6b8664b698d3d953e16c284fadc6caeb9e58e3db to fix this issue.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2019-25157

Affected Products

Ethex Contracts

References · 8

• 🔥 https://bitcointalk.org/index.php?topic=5120151.msg50827730#msg50827730 · Exploit
• https://github.com/ethex-bet/ethex-contracts/commit/6b8664b698d3d953e16c284fadc6caeb9e58e3db · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2019-25157 · Security Note
• https://osv.dev/vulnerability/CVE-2019-25157 · Vendor Advisory
• https://twitter.com/CVEnew/status/1736938365805842536 · Twitter Post
• https://vuldb.com/?ctiid.248271 · Note
• https://vuldb.com/?id.248271 · Note
• https://t.me/cvenotify/64089 · Telegram Post