CVE-2016-8889

Published: Oct 28, 2016Modified: May 6, 2026

6.2

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.5 / Impact: 3.6

Source: NVD

Description

In Bitcoin Knots v0.11.0.ljr20150711 through v0.13.0.knots20160814 (fixed in v0.13.1.knots20161027), the debug console stores sensitive information including private keys and the wallet passphrase in its persistent command history.

Affected (18)

Products: Bitcoin Knots Project: Bitcoin Knots

Bitcoin Knots Project

1 product

Bitcoin Knots

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Bitcoin Knots Project Bitcoin Knots	Version 0.11.0
Bitcoin Knots Project Bitcoin Knots	Version 0.11.0 rc1
Bitcoin Knots Project Bitcoin Knots	Version 0.11.0 rc2
Bitcoin Knots Project Bitcoin Knots	Version 0.11.0 rc3
Bitcoin Knots Project Bitcoin Knots	Version 0.11.1
Bitcoin Knots Project Bitcoin Knots	Version 0.11.1 rc1
Bitcoin Knots Project Bitcoin Knots	Version 0.11.1 rc2
Bitcoin Knots Project Bitcoin Knots	Version 0.11.2
Bitcoin Knots Project Bitcoin Knots	Version 0.11.2 rc1
Bitcoin Knots Project Bitcoin Knots	Version 0.12.0.knots20160226 rc1
Bitcoin Knots Project Bitcoin Knots	Version 0.12.0
Bitcoin Knots Project Bitcoin Knots	Version 0.12.0 rc1
Bitcoin Knots Project Bitcoin Knots	Version 0.12.0 rc2
Bitcoin Knots Project Bitcoin Knots	Version 0.12.0 rc3
Bitcoin Knots Project Bitcoin Knots	Version 0.12.0 rc4
Bitcoin Knots Project Bitcoin Knots	Version 0.12.0 rc5
Bitcoin Knots Project Bitcoin Knots	Version 0.12.1.knots20160629 rc2
Bitcoin Knots Project Bitcoin Knots	Version 0.13.0.knots20160814