CVE-2018-10057

The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to write the miner configuration file to arbitrary…

published June 5, 2018

CVSS
—
EPSS
2%
Percentile
83.3
In the wild
Unconfirmed
What it is

The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to write the miner configuration file to arbitrary locations on the server due to missing basedir restrictions (absolute directory traversal).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02319 · 83.3th percentile
Published
2018-06-05T21:00Z
EPSS history
Timeline
  • 05 JUN 21:00Z
    The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to write the miner configuration file to arbitrary…
    cvelistv5