Vulnerabilities > CVE-2024-37154 - Incorrect Authorization vulnerability in Evmos
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
LOW Availability impact
NONE Summary
Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. Users are able to delegate tokens that have not yet been vested. This affects employees and grantees who have funds managed via `ClawbackVestingAccount`. This affects 18.1.0 and earlier.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |