CVE-2016-8889

In Bitcoin Knots v0.11.0.ljr20150711 through v0.13.0.knots20160814 (fixed in v0.13.1.knots20161027), the debug console stores sensitive information including private keys and the wallet passphrase in its persistent command history.

Score

CVSS 3.0 6.2 Medium

Status

Modified - cve@mitre.org

Published

2016-10-28

Last modified

2024-08-06

Weaknesses

CWE-200, CWE-310

Affected products

• Bitcoin Knots (Bitcoin Knots Project)

References

• http://www.securityfocus.com/bid/94235
• https://bitcointalk.org/index.php?topic=1618462.0
• https://github.com/bitcoinknots/bitcoin/blob/v0.13.1.knots20161027/doc/release-notes.md