Описание
bitcoind in Bitcoin Core through 0.21.0 can create a new file in an arbitrary directory (e.g., outside the ~/.bitcoin directory) via a dumpwallet RPC call. NOTE: this reportedly does not violate the security model of Bitcoin Core, but can violate the security model of a fork that has implemented dumpwallet restrictions
Ссылки
- ExploitIssue TrackingThird Party Advisory
- ExploitIssue TrackingThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.21.0 (включая)
cpe:2.3:a:bitcoin:bitcoin_core:*:*:*:*:*:*:*:*
EPSS
Процентиль: 71%
0.01296
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
CVSS3: 7.5
debian
почти 6 лет назад
bitcoind in Bitcoin Core through 0.21.0 can create a new file in an ar ...
CVSS3: 7.5
github
больше 4 лет назад
bitcoind in Bitcoin Core through 0.21.0 can create a new file in an arbitrary directory (e.g., outside the ~/.bitcoin directory) via a dumpwallet RPC call.
CVSS3: 7.5
altlinux
больше 5 лет назад
ALT-PU-2021-1754: package `bitcoin` update to version 0.21.1-alt1
EPSS
Процентиль: 71%
0.01296
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-20