CVE-2024-23688

Consensys Discovery versions less than 0.4.5 uses the same AES/GCM nonce for the entire session. which should ideally be unique for every message. The node's private key isn't compromised, only the session key generated for specific peer communication is exposed.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/ConsenSys/discovery/security/advisories/GHSA-w3hj-wr2q-x83g	Vendor Advisory
https://github.com/advisories/GHSA-w3hj-wr2q-x83g	Third Party Advisory
https://vulncheck.com/advisories/vc-advisory-GHSA-w3hj-wr2q-x83g	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:consensys:discovery:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2024-01-19 22:15

Updated : 2024-01-26 15:53

NVD link : CVE-2024-23688

Mitre link : CVE-2024-23688

CVE.ORG link : CVE-2024-23688

JSON object : View

Products Affected

consensys

discovery

CWE

CWE-330

Use of Insufficiently Random Values

CWE-323

Reusing a Nonce, Key Pair in Encryption

{"id": "CVE-2024-23688", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2024-01-19T22:15:08.563", "references": [{"url": "https://github.com/ConsenSys/discovery/security/advisories/GHSA-w3hj-wr2q-x83g", "tags": ["Vendor Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/advisories/GHSA-w3hj-wr2q-x83g", "tags": ["Third Party Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://vulncheck.com/advisories/vc-advisory-GHSA-w3hj-wr2q-x83g", "tags": ["Third Party Advisory"], "source": "disclosure@vulncheck.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-330"}]}, {"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-323"}]}], "descriptions": [{"lang": "en", "value": "Consensys Discovery versions less than 0.4.5 uses the same AES/GCM nonce for the entire session. which should ideally be unique for every message. The node's private key isn't compromised, only the session key generated for specific peer communication is exposed.\n\n"}, {"lang": "es", "value": "Las versiones de Consensys Discovery inferiores a 0.4.5 utilizan el mismo nonce AES/GCM durante toda la sesi\u00f3n que idealmente deber\u00eda ser \u00fanico para cada mensaje. La clave privada del nodo no est\u00e1 comprometida, solo se expone la clave de sesi\u00f3n generada para una comunicaci\u00f3n entre pares espec\u00edfica."}], "lastModified": "2024-01-26T15:53:31.397", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:consensys:discovery:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "33F278C7-2BA2-400A-AB54-C1CC096B8D31", "versionEndExcluding": "0.4.5"}], "operator": "OR"}]}], "sourceIdentifier": "disclosure@vulncheck.com"}