CVE-2016-8889

Published Oct 28, 2016 CVSS 3.0 · 6.2 Medium EPSS < 1% KEV · Not listed
Description
In Bitcoin Knots v0.11.0.ljr20150711 through v0.13.0.knots20160814 (fixed in v0.13.1.knots20161027), the debug console stores sensitive information including private keys and the wallet passphrase in its persistent command history.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2016-9714 In Bitcoin Knots v0.11.0.ljr20150711 through v0.13.0.knots20160814 (fixed in v0.13.1.knots20161027), the debug console stores sensitive information including private keys and the wallet passphrase in its persistent command history.
History

No history.

Weaknesses
  • CWE-200

    Exposure of Sensitive Information to an Unauthorized Actor

  • CWE-310

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 2:35 AM
Reserved
Oct 23, 2016, 12:00 AM
Status
Modified
Published
Oct 28, 2016, 3:59 PM
Modified
Jun 17, 2026, 12:55 AM